ext-ms-win-kernel32-package-current-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ext-ms-win-kernel32-package-current-l1-1-0.dll
Size

3KB
MD5

053f8ed2c2b2ca2d71fcc0182af072df
SHA1

53442006d0665514794618257272149359caf87e
SHA256

d34ba8ee3cd5bfb8bc5b03124ec2c8cc91d21e5441e89f38f2133fe30a3c3d13
SHA512

a0a164c21bca6372b87fb7e65250930d8bad390b785a2e3e3325dbcb464b418bd65e707eb97253fb5353400b3f79363523fdfb83126b5dad4a39a1ad8a75a793

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-kernel32-package-current-l1-1-0.dll

Files

ext-ms-win-kernel32-package-current-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ext-ms-win-kernel32-package-current-l1-1-0.pdb

Exports

Exports

GetCurrentPackageId
GetCurrentPackageInfo

Sections

.text
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ