dwmapi[.]dll | Triage™

General

Target
dwmapi.dll
Size 9KB
Sample261001-pnhk5stdlc
SHA256 bf164c9b26e8ce157cc2e0d4b446a078f7b3f0f98d20b8a41037f83085a74839
MD5 eb8187969e04d2d6abc6b979a498ffc6
SHA1 5cc466d6b8aa21a3b09a7947e532fbb08738d41c
SHA512 a5af00969883d95768f5bf484c88550df0ead26f7d5b7452b35cbc74755f8af59fb2b24a5fca62fc86129e6b54566f69e7df098e3899d1dc56cb373caf81901a
SSDEEP 192:Eo9RUmGgCu49t3awPy5baBVHbA2Cxl6GHi15EvFv:EkG3VtKl0BVHbLEljQ5
TLSH
T1D712E90A07D29A24C505D13819078B72C633B9392B7326F71696CE670ADD5CA36BFB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dwmapi.dll

File Explorer

dwmapi.dll

.dll 9KB

dwmapi.dll

SHA256 bf164c9b26e8ce157cc2e0d4b446a078f7b3f0f98d20b8a41037f83085a74839
MD5 eb8187969e04d2d6abc6b979a498ffc6
SHA1 5cc466d6b8aa21a3b09a7947e532fbb08738d41c
SHA512 a5af00969883d95768f5bf484c88550df0ead26f7d5b7452b35cbc74755f8af59fb2b24a5fca62fc86129e6b54566f69e7df098e3899d1dc56cb373caf81901a
SSDEEP 192:Eo9RUmGgCu49t3awPy5baBVHbA2Cxl6GHi15EvFv:EkG3VtKl0BVHbLEljQ5
TLSH
T1D712E90A07D29A24C505D13819078B72C633B9392B7326F71696CE670ADD5CA36BFB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4113

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

704B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dwmapi.dll

generic