api-ms-win-shcore-sysinfo-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-shcore-sysinfo-l1-1-0.dll
Size

3KB
MD5

80225da3959ee4af2f70b715a7efda33
SHA1

3fd0c083cbd4c4c7077b1f7fabf5d397129d7ded
SHA256

23b53e8e0609384afbe4fd7634682e616f76e8b87b1be59282dfaf9cbab47820
SHA512

7eaebe3994cc755749cfdf8690f4e4164b172b61cc373c2c3a68efcb40c65ab837cc927fe8fe2e510cdee4fb532f528a5a3e761a1c6d1ef18bc9fd0950c36e22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-shcore-sysinfo-l1-1-0.dll

Files

api-ms-win-shcore-sysinfo-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-shcore-sysinfo-l1-1-0.pdb

Exports

Exports

GetCurrentProcessExplicitAppUserModelID
IsOS
SetCurrentProcessExplicitAppUserModelID

Sections

.text
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ