ext-ms-win-advapi32-safer-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ext-ms-win-advapi32-safer-l1-1-0.dll
Size

3KB
MD5

5cff2d7f0bfce28f2ee8cb314374128c
SHA1

db6a742350f937da04830073d4f3c8984a51c3a2
SHA256

b4d4c73d5395d1329a2a195b3561e72a2d582e134bb287b45f53036c5c718b04
SHA512

e8217c40a4daede957f88c03b4d69045a09fc36baa24050f6c91f7ca2953ebe93c28b82b73df4f1bb5da681ac11e857ffb25e145301e8826ec6ad7c238c91dbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-advapi32-safer-l1-1-0.dll

Files

ext-ms-win-advapi32-safer-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ext-ms-win-advapi32-safer-l1-1-0.pdb

Exports

Exports

SaferCloseLevel
SaferComputeTokenFromLevel
SaferCreateLevel
SaferIdentifyLevel
SaferiCompareTokenLevels
SaferiIsExecutableFileType
SaferiSearchMatchingHashRules

Sections

.text
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ