ext-ms-win-cluster-clusapi-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ext-ms-win-cluster-clusapi-l1-1-0.dll
Size

3KB
MD5

2ea79109905dcdbe523450ef962c46e3
SHA1

2168dafd0ec3b71c5c241a5fb5c669e961201a32
SHA256

ee49eb8b3e5a56c408a7705a6ddb5b22967dbab2af153c78de8258b6c51e4d59
SHA512

7139fa0b074850e81d0157270871b0b6c3ac74e2c04edf9dbfce9b830d8025e6efac62745551c20cc07b44c6f04a549c3823eecf54a43dc88473218fff4d5ceb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-cluster-clusapi-l1-1-0.dll

Files

ext-ms-win-cluster-clusapi-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ext-ms-win-cluster-clusapi-l1-1-0.pdb

Exports

Exports

CloseCluster
CloseClusterNode
CloseClusterResource
ClusterCloseEnum
ClusterEnum
ClusterOpenEnum
ClusterResourceControl
ClusterResourceTypeCloseEnum
ClusterResourceTypeEnum
ClusterResourceTypeOpenEnum
GetClusterInformation
GetClusterNodeState
GetNodeClusterState
OpenCluster
OpenClusterNode
OpenClusterResource

Sections

.text
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ