WindowsCodecs[.]dll[.]exe

General

Target
WindowsCodecs.dll.exe
Size 28KB
Sample260925-eppezaxx4k
SHA256 4131c88b0dea6ba45cd633eed383240d41620e4467afa4e956d6c2dfafd58c1c
MD5 4376f6e050ebd456f6640dc0ea408add
SHA1 b9b0970281db5f279ad59b2ee7e379312ceec64e
SHA512 c58a02ab74dfc1c480fb1518a8da9865b513b9b92149f286023b870a12a571e6ebd007ec654c1893e57d9f8105b0f66a612a8e8d98144e022026ef00d095d853
SSDEEP 384:SxpgmFsfZI1nDJXd3zgnvxmU5XX0Fy8CGDxAVwuUZLUU6fnwPQcgBfiDIuOxv0:SxpgmyZIDNdjgkUuPCGi23js9x
TLSH
T184D21A6AFF0A8495C42DE23DD179DBD2F7B830E09331EE6D3741A8185E12643A617A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsCodecs.dll.exe

File Explorer

WindowsCodecs.dll.exe

.dll 28KB

WindowsCodecs.dll.exe

IMPHASH 3da1e1538edcd467227c7f51667e1b54
SHA256 4131c88b0dea6ba45cd633eed383240d41620e4467afa4e956d6c2dfafd58c1c
MD5 4376f6e050ebd456f6640dc0ea408add
SHA1 b9b0970281db5f279ad59b2ee7e379312ceec64e
SHA512 c58a02ab74dfc1c480fb1518a8da9865b513b9b92149f286023b870a12a571e6ebd007ec654c1893e57d9f8105b0f66a612a8e8d98144e022026ef00d095d853
SSDEEP 384:SxpgmFsfZI1nDJXd3zgnvxmU5XX0Fy8CGDxAVwuUZLUU6fnwPQcgBfiDIuOxv0:SxpgmyZIDNdjgkUuPCGi23js9x
TLSH
T184D21A6AFF0A8495C42DE23DD179DBD2F7B830E09331EE6D3741A8185E12643A617A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DllGetClassObject IEnumString_Next_WIC_Proxy IEnumString_Reset_WIC_Proxy IPropertyBag2_Write_Proxy IWICBitmapClipper_Initialize_Proxy IWICBitmapCodecInfo_DoesSupportAnimation_Proxy IWICBitmapCodecInfo_DoesSupportLossless_Proxy IWICBitmapCodecInfo_DoesSupportMultiframe_Proxy IWICBitmapCodecInfo_GetContainerFormat_Proxy IWICBitmapCodecInfo_GetDeviceManufacturer_Proxy IWICBitmapCodecInfo_GetDeviceModels_Proxy IWICBitmapCodecInfo_GetFileExtensions_Proxy IWICBitmapCodecInfo_GetMimeTypes_Proxy IWICBitmapDecoder_CopyPalette_Proxy IWICBitmapDecoder_GetColorContexts_Proxy IWICBitmapDecoder_GetDecoderInfo_Proxy IWICBitmapDecoder_GetFrameCount_Proxy IWICBitmapDecoder_GetFrame_Proxy IWICBitmapDecoder_GetMetadataQueryReader_Proxy IWICBitmapDecoder_GetPreview_Proxy IWICBitmapDecoder_GetThumbnail_Proxy IWICBitmapEncoder_Commit_Proxy IWICBitmapEncoder_CreateNewFrame_Proxy IWICBitmapEncoder_GetEncoderInfo_Proxy IWICBitmapEncoder_GetMetadataQueryWriter_Proxy IWICBitmapEncoder_Initialize_Proxy IWICBitmapEncoder_SetPalette_Proxy IWICBitmapEncoder_SetThumbnail_Proxy IWICBitmapFlipRotator_Initialize_Proxy IWICBitmapFrameDecode_GetColorContexts_Proxy IWICBitmapFrameDecode_GetMetadataQueryReader_Proxy IWICBitmapFrameDecode_GetThumbnail_Proxy IWICBitmapFrameEncode_Commit_Proxy IWICBitmapFrameEncode_GetMetadataQueryWriter_Proxy IWICBitmapFrameEncode_Initialize_Proxy IWICBitmapFrameEncode_SetColorContexts_Proxy IWICBitmapFrameEncode_SetResolution_Proxy IWICBitmapFrameEncode_SetSize_Proxy IWICBitmapFrameEncode_SetThumbnail_Proxy IWICBitmapFrameEncode_WriteSource_Proxy IWICBitmapLock_GetDataPointer_STA_Proxy IWICBitmapLock_GetStride_Proxy IWICBitmapScaler_Initialize_Proxy IWICBitmapSource_CopyPalette_Proxy IWICBitmapSource_CopyPixels_Proxy IWICBitmapSource_GetPixelFormat_Proxy IWICBitmapSource_GetResolution_Proxy IWICBitmapSource_GetSize_Proxy IWICBitmap_Lock_Proxy IWICBitmap_SetPalette_Proxy IWICBitmap_SetResolution_Proxy IWICColorContext_InitializeFromMemory_Proxy IWICComponentFactory_CreateMetadataWriterFromReader_Proxy IWICComponentFactory_CreateQueryWriterFromBlockWriter_Proxy IWICComponentInfo_GetAuthor_Proxy IWICComponentInfo_GetCLSID_Proxy IWICComponentInfo_GetFriendlyName_Proxy IWICComponentInfo_GetSpecVersion_Proxy IWICComponentInfo_GetVersion_Proxy IWICFastMetadataEncoder_Commit_Proxy IWICFastMetadataEncoder_GetMetadataQueryWriter_Proxy IWICFormatConverter_Initialize_Proxy IWICImagingFactory_CreateBitmapClipper_Proxy IWICImagingFactory_CreateBitmapFlipRotator_Proxy IWICImagingFactory_CreateBitmapFromHBITMAP_Proxy IWICImagingFactory_CreateBitmapFromHICON_Proxy IWICImagingFactory_CreateBitmapFromMemory_Proxy IWICImagingFactory_CreateBitmapFromSource_Proxy IWICImagingFactory_CreateBitmapScaler_Proxy IWICImagingFactory_CreateBitmap_Proxy IWICImagingFactory_CreateComponentInfo_Proxy IWICImagingFactory_CreateDecoderFromFileHandle_Proxy IWICImagingFactory_CreateDecoderFromFilename_Proxy IWICImagingFactory_CreateDecoderFromStream_Proxy IWICImagingFactory_CreateEncoder_Proxy IWICImagingFactory_CreateFastMetadataEncoderFromDecoder_Proxy IWICImagingFactory_CreateFastMetadataEncoderFromFrameDecode_Proxy IWICImagingFactory_CreateFormatConverter_Proxy IWICImagingFactory_CreatePalette_Proxy IWICImagingFactory_CreateQueryWriterFromReader_Proxy IWICImagingFactory_CreateQueryWriter_Proxy IWICImagingFactory_CreateStream_Proxy IWICMetadataBlockReader_GetCount_Proxy IWICMetadataBlockReader_GetReaderByIndex_Proxy IWICMetadataQueryReader_GetContainerFormat_Proxy IWICMetadataQueryReader_GetEnumerator_Proxy IWICMetadataQueryReader_GetLocation_Proxy IWICMetadataQueryReader_GetMetadataByName_Proxy IWICMetadataQueryWriter_RemoveMetadataByName_Proxy IWICMetadataQueryWriter_SetMetadataByName_Proxy IWICPalette_GetColorCount_Proxy IWICPalette_GetColors_Proxy IWICPalette_GetType_Proxy IWICPalette_HasAlpha_Proxy IWICPalette_InitializeCustom_Proxy IWICPalette_InitializeFromBitmap_Proxy IWICPalette_InitializeFromPalette_Proxy IWICPalette_InitializePredefined_Proxy IWICPixelFormatInfo_GetBitsPerPixel_Proxy IWICPixelFormatInfo_GetChannelCount_Proxy IWICPixelFormatInfo_GetChannelMask_Proxy IWICStream_InitializeFromIStream_Proxy IWICStream_InitializeFromMemory_Proxy WICConvertBitmapSource WICCreateBitmapFromSection WICCreateBitmapFromSectionEx WICCreateColorContext_Proxy WICCreateImagingFactory_Proxy WICGetMetadataContentSize WICMapGuidToShortName WICMapSchemaToName WICMapShortNameToGuid WICMatchMetadataContent WICSerializeMetadataContent WICSetEncoderFormat_Proxy

WindowsCodecs.dll.exe

kernel32

advapi32

user32

imm32

shell32

mpr

generic

Sharing

General

Malware Config

Signatures

File Explorer

WindowsCodecs.dll.exe

kernel32

advapi32

user32

imm32

shell32

mpr

generic