api-ms-win-core-libraryloader-l1-2-0[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-core-libraryloader-l1-2-0.zip
Size

1KB
MD5

2ac23ba312d550cbdc3aba44f6e82314
SHA1

42453c38d54e2391ff825c6602e28a6aaf8208de
SHA256

590adb1d1a8b444ea8c5de00beb51f4571d05fada4147f17b1d8a1331df351bf
SHA512

4b04acd4d7144e988c14bd4a7c89061dfa7dd3414f65bbb1704e142f1abc6d637f70f05ae2b2e00b40c9aaa280426f82d84349dbe9b55b030283fcc7d62c01c8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/api-ms-win-core-libraryloader-l1-2-0.dll

Files

api-ms-win-core-libraryloader-l1-2-0.zip
.zip
api-ms-win-core-libraryloader-l1-2-0.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-libraryloader-l1-2-0.pdb

Exports

Exports

AddDllDirectory
DisableThreadLibraryCalls
EnumResourceLanguagesExA
EnumResourceLanguagesExW
EnumResourceNamesExA
EnumResourceNamesExW
EnumResourceTypesExA
EnumResourceTypesExW
FindResourceExW
FindStringOrdinal
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadResource
LoadStringA
LoadStringW
LockResource
RemoveDllDirectory
SetDefaultDllDirectories
SizeofResource

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ