api-ms-win-core-psm-info-l1-1-0[.]dll | Triage

Sharing

General

Target

api-ms-win-core-psm-info-l1-1-0.dll
Size

3KB
MD5

e5f6070e3361cadae8b663c324e77368
SHA1

e36fac65659f8665c60f787dce7af9f4b3e3b9d3
SHA256

204ce60f56891fb80e562f09a50b6a53b5d4d00e575c768bcdd5d9c383e3376c
SHA512

33382e42cfcfd9dd673ac86bcf0b5bc43bc0ca3748e7433b9688991e15fae5439b5609efaf559f8603c96f7cd8e506329f42c1757da2e77c81d4b6645fb5384a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-core-psm-info-l1-1-0.dll

Files

api-ms-win-core-psm-info-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-psm-info-l1-1-0.pdb

Exports

Exports

PsmQueryApplicationPerformanceInformation
PsmQueryQuotaInformation

Sections

.text
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ