api-ms-win-core-processthreads-l1-1-1[.]dll

General

Target

api-ms-win-core-processthreads-l1-1-1.dll
Size

4KB
MD5

004f7f67994de33959d6480ef4d4f515
SHA1

76e83db625d504d1feec5dec918552f9ec51c4c3
SHA256

053a83b3f8ac76232952bdb8fb5c5067f06ba48f82b474829c25326adbd26361
SHA512

d187950683c79b1dffe4432fb476071a203cb14d7987377f71538b81fd36077f181fb7d64e9e4e30099f239764e6cbb501b65c095cd4532bc0b2ab9fbd7755a3
SSDEEP

48:6yNDZxfBPLJfSAQOr0xfWeKBKvpgp5ae6lgig8YHSzOYFlbTSOgoshgW9MTscPkM:xNLZjJfZiOYFtTScsaEW4UohWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-core-processthreads-l1-1-1.dll

Files

api-ms-win-core-processthreads-l1-1-1.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-processthreads-l1-1-1.pdb

Exports

Exports

CreateProcessA
CreateProcessAsUserW
CreateProcessW
CreateRemoteThread
CreateRemoteThreadEx
CreateThread
DeleteProcThreadAttributeList
ExitProcess
ExitThread
FlushInstructionCache
FlushProcessWriteBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThread
GetCurrentThreadId
GetCurrentThreadStackLimits
GetExitCodeProcess
GetExitCodeThread
GetPriorityClass
GetProcessHandleCount
GetProcessId
GetProcessIdOfThread
GetProcessMitigationPolicy
GetProcessTimes
GetProcessVersion
GetStartupInfoW
GetThreadContext
GetThreadId
GetThreadIdealProcessorEx
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
InitializeProcThreadAttributeList
IsProcessorFeaturePresent
OpenProcess
OpenProcessToken
OpenThread
OpenThreadToken
ProcessIdToSessionId
QueryProcessAffinityUpdateMode
QueueUserAPC
ResumeThread
SetPriorityClass
SetProcessAffinityUpdateMode
SetProcessMitigationPolicy
SetProcessShutdownParameters
SetThreadContext
SetThreadIdealProcessorEx
SetThreadPriority
SetThreadPriorityBoost
SetThreadStackGuarantee
SetThreadToken
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UpdateProcThreadAttribute

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 1008B

.text
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 1008B