ext-ms-win-gdi-render-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ext-ms-win-gdi-render-l1-1-0.dll
Size

3KB
MD5

b440d4179c89947b0866dcf908b1b209
SHA1

c7f60b3ae31f5e599d4f7898ffe94cb05a384a8b
SHA256

dd5410641905ab76692aa483419db87fc4275873df6e16706fbdb1e15a705d21
SHA512

8c25dad8a1e8a8a9dec0ad6939246b111c491d4edb2f5fd2ac3d3e8bc331c0fc7f19eb7f648693188d2b5ad1d1cfdb3eedaa88a70ac52d6c8870a40f8ed85779

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-gdi-render-l1-1-0.dll

Files

ext-ms-win-gdi-render-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ext-ms-win-gdi-Render-l1-1-0.pdb

Exports

Exports

BeginGdiRendering
CreateBitmapFromDxSurface2
EndGdiRendering

Sections

.text
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ