api-ms-win-appmodel-runtime-l1-1-1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-appmodel-runtime-l1-1-1.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
api-ms-win-appmodel-runtime-l1-1-1.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-appmodel-runtime-l1-1-1.dll
-
Size
3KB
-
MD5
ac49e4b5b829c85243971bc2308fcef9
-
SHA1
50929cb63d62396601071a173302a4504323c5ab
-
SHA256
50098e5e390380f649b0b02102d8fd68fd594faf3b88f8f8b1de7251c23525cc
-
SHA512
d0c3130136329a9b02c5d856e655d83de6febab49573f2b9fd1b5603c491fba747263867d0054e6f3ea1fe7eeb7b37cea0cfa81cff9d5f30f9a4290ee8643c2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-appmodel-runtime-l1-1-1.dll
Files
-
api-ms-win-appmodel-runtime-l1-1-1.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
ClosePackageInfo
FindPackagesByPackageFamily
FormatApplicationUserModelId
GetApplicationUserModelId
GetCurrentApplicationUserModelId
GetCurrentPackageFamilyName
GetCurrentPackageFullName
GetCurrentPackageId
GetCurrentPackageInfo
GetCurrentPackagePath
GetPackageApplicationIds
GetPackageFamilyName
GetPackageFullName
GetPackageId
GetPackageInfo
GetPackagePath
GetPackagePathByFullName
GetPackagesByPackageFamily
GetStagedPackageOrigin
GetStagedPackagePathByFullName
OpenPackageInfoByFullName
PackageFamilyNameFromFullName
PackageFamilyNameFromId
PackageFullNameFromId
PackageIdFromFullName
PackageNameAndPublisherIdFromFamilyName
ParseApplicationUserModelId
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ