api-ms-win-ro-typeresolution-l1-1-0[.]dll | Triage

Sharing

General

Target

api-ms-win-ro-typeresolution-l1-1-0.dll
Size

3KB
MD5

bb81978ac9cc16a73ed4aeab86a86504
SHA1

70b8bb834e3a19bb35a26c90b0d1be0490a6b919
SHA256

6760ac9b21800733f24c001b537b4e059dc1b58fe4bcacfdc9e3278fbff9b933
SHA512

7e28de562eee42b0e05b145a4d7e4c6e190d343735b6b3d39878ef81c539646a112357fe515d87d250ebc011074acf22e8fb3fc0a9a759d9d7e4124659ad5664

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-ro-typeresolution-l1-1-0.dll

Files

api-ms-win-ro-typeresolution-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-ro-typeresolution-l1-1-0.pdb

Exports

Exports

RoGetMetaDataFile
RoParseTypeName
RoResolveNamespace

Sections

.text
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ