api-ms-win-security-lsalookup-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-security-lsalookup-l1-1-0.dll
Size

3KB
MD5

c38e38a59f0baf05e7268ec8a9acc44a
SHA1

300571b5ef4a068e5cdeb6a17df7bd1620e67d6f
SHA256

bd68dca02f1a6c3437327f2085932ef637a83c2c862185e5e63cd270bbef22a8
SHA512

bd135760acf4679498dafa1aa5cbcb56bff44cbd2dd1c87d20b737880c219387ef5414fef97ea7f06e5197e0d50c762c3294fd47969e6d998956195b43b99b12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-security-lsalookup-l1-1-0.dll

Files

api-ms-win-security-lsalookup-l1-1-0.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

API-MS-Win-Security-LSALookup-L1-1-0.pdb

Exports

Exports

LookupAccountNameLocalA
LookupAccountNameLocalW
LookupAccountSidLocalA
LookupAccountSidLocalW
LsaLookupClose
LsaLookupFreeMemory
LsaLookupGetDomainInfo
LsaLookupManageSidNameMapping
LsaLookupOpenLocalPolicy
LsaLookupTranslateNames
LsaLookupTranslateSids

Sections

.text
Size: 1024B - Virtual size: 605B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ