api-ms-win-devices-swdevice-l1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-devices-swdevice-l1-1-0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
api-ms-win-devices-swdevice-l1-1-0.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-devices-swdevice-l1-1-0.dll
-
Size
2KB
-
MD5
2a2a8a2f2294a1ea90b3fb90982d42cb
-
SHA1
46ebbb76cb25bf43850da94f2fc737db55a7cfca
-
SHA256
5d497159b983e513345dc158624258d3f860baefe444b842dcf9f39812cecee6
-
SHA512
5e2ef89eacc43a25eb0484ae12ee3eef73be2f150e996a7911518dfbd6b23584b4cdb43f946540f1b84c41a37fb4177471c1744fcb50df1fd0c788c5cbf7d752
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-devices-swdevice-l1-1-0.dll
Files
-
api-ms-win-devices-swdevice-l1-1-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
SwDeviceClose
SwDeviceCreate
SwDeviceInterfacePropertySet
SwDeviceInterfaceRegister
SwDeviceInterfaceSetState
SwDevicePropertySet
SwMemFree
Sections
.text Size: 512B - Virtual size: 449B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ