api-ms-win-power-base-l1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-power-base-l1-1-0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
api-ms-win-power-base-l1-1-0.dll
Resource
win10v2004-20240426-en
General
-
Target
api-ms-win-power-base-l1-1-0.dll
-
Size
3KB
-
MD5
a83faa5ff2899ec6be4395591c677721
-
SHA1
a09279136d0d394a2e440e55e23adcb6bf1952ae
-
SHA256
e9b905a8beafac8a9a0b6bd28b0ddce9c79e6a1e4bde029b1a9ab42b49e221ec
-
SHA512
feedb76dbe7460a1cf79a29c46e2180503e3208a36bc1da7829be5a6b54190a5f79bcb38df970426f2fd8583722bbd0bc05fde4efaa01db23c3632808e788807
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-power-base-l1-1-0.dll
Files
-
api-ms-win-power-base-l1-1-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
CallNtPowerInformation
GetPwrCapabilities
PowerDeterminePlatformRoleEx
PowerRegisterSuspendResumeNotification
PowerUnregisterSuspendResumeNotification
Sections
.text Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ