api-ms-win-core-console-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-core-console-l1-1-0.dll
Size

36KB
MD5

07f8ab1963b8693eefb87a5fef483358
SHA1

963a85532909410ca85bb32669be777f03fc5d8a
SHA256

74dfa61ba04e52fc925ed4608fa6c58dd75aa59403a5ce89f1eadc82a5afb45b
SHA512

dd25ab0c7668a315ddcf4585fdf787f9c65f0489c4ac8b86951d5a76f272bade265b42fe6a2ef1a64de774df07d8ba77cf64f03643f835bc13865ac8cc8a967c
SSDEEP

384:WLWfhWBLm0Gf71MgKlx+Yd+Y3DGEfJ8JN77hhQOOL1MgKlx+YybL+Y3DGA6nXAMp:LkRxg8zDGgW3heOBg8yVDGtnXAMxkEyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-core-console-l1-1-0.dll

Files

api-ms-win-core-console-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-console-l1-1-0.pdb

Exports

Exports

AllocConsole
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleA
WriteConsoleW

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ