api-ms-win-appmodel-state-l1-1-1[.]dll

General

Target

api-ms-win-appmodel-state-l1-1-1.dll
Size

4KB
MD5

286dfaa48387588a43b8329a7cb508da
SHA1

ad163a01c4f609c77930cf3d44038f45773e7bb7
SHA256

92b22be8cfbb17a27c40dff8d4afad212783d256c2c6a0da22ca7ceb39c2c4c3
SHA512

eeb0cda74faa47d472fa58247d2f79779c49928b919ffeed385fced659bf017914d1634cdb529017050a14fed64fc18c53fd5ba75e381090cfb15f040454269f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-appmodel-state-l1-1-1.dll

Files

api-ms-win-appmodel-state-l1-1-1.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-appmodel-state-l1-1-1.pdb

Exports

Exports

AcquireStateLock
CheckIfStateChangeNotificationExists
CloseState
CloseStateAtom
CloseStateChangeNotification
CloseStateContainer
CloseStateLock
CommitStateAtom
CreateStateAtom
CreateStateChangeNotification
CreateStateContainer
CreateStateLock
CreateStateSubcontainer
DeleteStateAtomValue
DeleteStateContainer
DeleteStateContainerValue
DuplicateStateContainerHandle
EnumerateStateAtomValues
EnumerateStateContainerItems
GetHivePath
GetRoamingLastObservedChangeTime
GetSerializedAtomBytes
GetStateContainerDepth
GetStateFolder
GetStateRootFolder
GetStateSettingsFolder
GetStateVersion
GetSystemAppDataFolder
GetSystemAppDataKey
OpenState
OpenStateAtom
OpenStateExplicit
OverrideRoamingDataModificationTimesInRange
PublishStateChangeNotification
QueryStateAtomValueInfo
QueryStateContainerItemInfo
ReadStateAtomValue
ReadStateContainerValue
RegisterStateChangeNotification
RegisterStateLock
ReleaseStateLock
ResetState
SetRoamingLastObservedChangeTime
SetStateVersion
SubscribeStateChangeNotification
UnregisterStateChangeNotification
UnregisterStateLock
UnsubscribeStateChangeNotification
WriteStateAtomValue
WriteStateContainerValue

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B