api-ms-win-crt-filesystem-l1-1-0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-crt-filesystem-l1-1-0.dll
Size

20KB
MD5

bbbf361746440219a3f7933ced5234bb
SHA1

1e3ededaa28e41f51e903c2ca66e7bd048fbaee7
SHA256

42a99227775e85ca8c197811a86aad0e2af496bd21623e4c9a2dd747571c8990
SHA512

f6681875bc02903676cd3ea3303920202c563a1a6e82dd687ed9bd0fafe92c9abba4a6df3e9c93f2bb0da9dccf0abb4543b6a5e5f0c92fa06e809b30b84085aa
SSDEEP

192:vSnWlC0i5ChWBhWyWYnO/VWQ4yWL8xT/FMg/uuOiqnajB0:vSnWm5ChWBhWoUqwT/Iill0

Score

1^/10

Malware Config

Signatures

Files

api-ms-win-crt-filesystem-l1-1-0.dll
.dll windows x64

Code Sign

33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:24

Not After

02/12/2021, 21:24

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:9f:32:50:b8:66:4a:4d:52:f8:fe:ba:3d:7c:7e:b5:4e:ba:c0:b9:6a:df:ee:8e:c1:f5:a8:62:21:9f:70:99
Signer

Actual PE Digest

43:9f:32:50:b8:66:4a:4d:52:f8:fe:ba:3d:7c:7e:b5:4e:ba:c0:b9:6a:df:ee:8e:c1:f5:a8:62:21:9f:70:99

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

23/03/2023, 16:09
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename

Sections

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:dfCertificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

43:9f:32:50:b8:66:4a:4d:52:f8:fe:ba:3d:7c:7e:b5:4e:ba:c0:b9:6a:df:ee:8e:c1:f5:a8:62:21:9f:70:99Signer

Signature Validations

Verification

23/03/2023, 16:09 Valid: false

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 4KB - Virtual size: 3KB

.data Size: - Virtual size: 128B

.rsrc Size: 4KB - Virtual size: 1008B

33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

43:9f:32:50:b8:66:4a:4d:52:f8:fe:ba:3d:7c:7e:b5:4e:ba:c0:b9:6a:df:ee:8e:c1:f5:a8:62:21:9f:70:99
Signer

23/03/2023, 16:09
Valid: false

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: - Virtual size: 128B

.rsrc
Size: 4KB - Virtual size: 1008B