api-ms-win-core-memory-l1-1-2[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-core-memory-l1-1-2.dll
Size

3KB
MD5

0ab60035fced5b9821d5ed7c79a2775e
SHA1

b47b567d62f9cdc4863c51d963c159e14f19ffd4
SHA256

972e591d9dd5fc01a5ac0d63cb53f8c507d3de3875b0948875bcd448a525e23e
SHA512

34863ffe03b0164066eebfa7f7d21a60c6bd367c5601c126d5519f5b5f1693ecb010e0afba0a1a8fbb8eded07ca481f0f6af99f683a34285219bd21a4090bd34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-core-memory-l1-1-2.dll

Files

api-ms-win-core-memory-l1-1-2.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-memory-l1-1-2.pdb

Exports

Exports

AllocateUserPhysicalPages
AllocateUserPhysicalPagesNuma
CreateFileMappingFromApp
CreateFileMappingNumaW
CreateFileMappingW
CreateMemoryResourceNotification
FlushViewOfFile
FreeUserPhysicalPages
GetLargePageMinimum
GetMemoryErrorHandlingCapabilities
GetProcessWorkingSetSizeEx
GetSystemFileCacheSize
GetWriteWatch
MapUserPhysicalPages
MapViewOfFile
MapViewOfFileEx
MapViewOfFileFromApp
OpenFileMappingW
PrefetchVirtualMemory
QueryMemoryResourceNotification
ReadProcessMemory
RegisterBadMemoryNotification
ResetWriteWatch
SetProcessWorkingSetSizeEx
SetSystemFileCacheSize
UnmapViewOfFile
UnmapViewOfFileEx
UnregisterBadMemoryNotification
VirtualAlloc
VirtualAllocEx
VirtualAllocExNuma
VirtualFree
VirtualFreeEx
VirtualLock
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
VirtualUnlock
WriteProcessMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ