ext-ms-win-biometrics-winbio-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ext-ms-win-biometrics-winbio-l1-1-0.dll
Size

3KB
MD5

93805640d2a829045ef757198524e01a
SHA1

8217279b9e3cc592ef2a6dddf726ca797b3e2dc3
SHA256

9b5730c12445daffd7fa0123792d3a9bca37a54ed3d8acd92f2b624bd28b7a1a
SHA512

9c88703105b19005045e24544fd007cdefac3c755d9f2bfedc140d36e1a51d76a445d3d138ef45c82d517571219eee13220c2e12e166b80039f7ec62487e34b4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-biometrics-winbio-l1-1-0.dll

Files

ext-ms-win-biometrics-winbio-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ext-ms-win-biometrics-winbio-l1-1-0.pdb

Exports

Exports

WinBioNotifyPasswordChange

Sections

.text
Size: 512B - Virtual size: 261B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ