api-ms-win-service-core-l1-1-0[.]dll | Triage

Sharing

General

Target

api-ms-win-service-core-l1-1-0.dll
Size

2KB
MD5

993473c994254709a7e6dc20c9981f0d
SHA1

b8179355197793df5fb95cad8b3d26ee6f458203
SHA256

b2deaa75637cf3466c3106ed1f83c24f39bff64cdc42569f7b3e453b96bc366b
SHA512

cec93f82179529442bfd7bfa3556ee145d3d3614c657a9ea4dcd8e5ca43f1c700298813e86488dea4d49402a2535b9fe1fc45c7703cb249edde0fd92fcbb937a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-service-core-l1-1-0.dll

Files

api-ms-win-service-core-l1-1-0.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

API-MS-WIN-Service-Core-L1-1-0.pdb

Exports

Exports

RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW

Sections

.text
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ