api-ms-win-core-processsecurity-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-core-processsecurity-l1-1-0.dll
Size

2KB
MD5

be21c3d45b15f587adbe11b5c64cc2d8
SHA1

51031abe3bd1816434aec639c50dfff096e03605
SHA256

3277c7ea6205b988ae41f5c4c691f951a8e801042be655dc744772d78f6d369c
SHA512

ba7a5a30738b68c43dca98747688a0b211bb7ae45e7abfb73149f6abfb055a5ac145a1a56ef1e0285921afd8cde284e4788073c2f5c624568f3dd3a754d89739

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-core-processsecurity-l1-1-0.dll

Files

api-ms-win-core-processsecurity-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processsecurity-l1-1-0.pdb

Exports

Exports

CreateProcessAsUserW
ImpersonateNamedPipeClient
OpenProcessToken
OpenThreadToken
SetThreadToken

Sections

.text
Size: 512B - Virtual size: 389B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ