ext-ms-win-gpapi-grouppolicy-l1-1-0[.]dll

General

Target

ext-ms-win-gpapi-grouppolicy-l1-1-0.dll
Size

4KB
MD5

d019edbb87bf97168ae5ac788dba1e4e
SHA1

804fc4d71d65cc485f7e46456497c2d53fc53e9e
SHA256

05482995ef1f86882851adad4310802943c9831c7e896e677e38e8b932215502
SHA512

9f29bffe8a8de66926a551d26e3f1f9e9a69c8833abe86187be805d6f55ecb8935286ee2a5b2f6ad028130c5b3f15178965a922dfe291e2e97340c3c810d3bb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-gpapi-grouppolicy-l1-1-0.dll

Files

ext-ms-win-gpapi-grouppolicy-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

EXT-MS-Win-Gpapi-GroupPolicy-L1-1-0.pdb

Exports

Exports

AreThereVisibleLogoffScriptsInternalWorker
AreThereVisibleShutdownScriptsInternalWorker
EnterCriticalPolicySectionExStub
EnterCriticalPolicySectionInternalWorker
ForceSyncFgPolicyInternalWorker
FreeGPOListInternalAWorker
FreeGPOListInternalWWorker
GenerateGPNotificationInternalWorker
GetAppliedGPOListInternalAWorker
GetAppliedGPOListInternalWWorker
GetGPOListInternalAWorker
GetGPOListInternalWWorker
GetNextFgPolicyRefreshInfoInternalWorker
GetPreviousFgPolicyRefreshInfoInternalWorker
HasPolicyForegroundProcessingCompletedInternalWorker
IsSyncForegroundPolicyRefreshWorker
LeaveCriticalPolicySectionInternalWorker
RefreshPolicyExInternalWorker
RefreshPolicyInternalWorker
RegisterGPNotificationInternalWorker
RsopLoggingEnabledInternalWorker
UnregisterGPNotificationInternalWorker
WaitForMachinePolicyForegroundProcessingInternalWorker
WaitForUserPolicyForegroundProcessingInternalWorker

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 512B - Virtual size: 26B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 512B - Virtual size: 26B