ext-ms-win-gui-uxinit-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ext-ms-win-gui-uxinit-l1-1-0.dll
Size

3KB
MD5

41ac1e64043a4a4278575d5ac6d0ccfa
SHA1

501199edb73993a17e7f39e0bfdeb53b4a978596
SHA256

cda16bae8a77e8263c37a7cb901c777cae45dd5e9137be23380c7ff9e26f6c5e
SHA512

38a3e878ddf15ebd4580b5de995cb82f36f990bda3a05827eeb70b22530669c3996f69850b206a980484aeeb3049dacefd4fc884879fb6a8efc8dab467a78290

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ext-ms-win-gui-uxinit-l1-1-0.dll

Files

ext-ms-win-gui-uxinit-l1-1-0.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

EXT-MS-Win-gui-uxinit-l1-1-0.pdb

Exports

Exports

ThemesOnCreateSession
ThemesOnDisconnect
ThemesOnEarlyCreateSession
ThemesOnLogoff
ThemesOnLogon
ThemesOnReconnect
ThemesOnTerminateSession

Sections

.text
Size: 512B - Virtual size: 427B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ