api-ms-win-core-processthreads-l1-1-2[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

api-ms-win-core-processthreads-l1-1-2.dll
Size

68KB
MD5

43a5ac065c3575c94c2942968f3b32d1
SHA1

132d632c6d86806af388e991b93db5c361c4fe27
SHA256

b03b82036c463bf4df8d15eef4f03784efdf0716efe07aa1c4492d6bcbe46cef
SHA512

823b23f2f5c9bbbb41defd8fa4581fa2237d8d246b89b80d55613c7b6b23b7c7acbcefc042bc28357bfaa9429edd810c362814babc8406fd3b0344b13a79267d
SSDEEP

384:IzoxFPMoWOUStfTSdn4JLkb8WlyUrKkFIj3:Ikk4JLkbU

Score

1^/10

Malware Config

Signatures

Files

api-ms-win-core-processthreads-l1-1-2.dll
.dll windows x64

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DisableThreadLibraryCalls
RaiseException

Exports

Exports

CreateProcessA
CreateProcessAsUserW
CreateProcessW
CreateRemoteThread
CreateRemoteThreadEx
CreateThread
DeleteProcThreadAttributeList
ExitProcess
ExitThread
FlushInstructionCache
FlushProcessWriteBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThread
GetCurrentThreadId
GetCurrentThreadStackLimits
GetExitCodeProcess
GetExitCodeThread
GetPriorityClass
GetProcessHandleCount
GetProcessId
GetProcessIdOfThread
GetProcessMitigationPolicy
GetProcessPriorityBoost
GetProcessTimes
GetProcessVersion
GetStartupInfoW
GetSystemTimes
GetThreadContext
GetThreadIOPendingFlag
GetThreadId
GetThreadIdealProcessorEx
GetThreadInformation
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
InitializeProcThreadAttributeList
IsProcessCritical
IsProcessorFeaturePresent
OpenProcess
OpenProcessToken
OpenThread
OpenThreadToken
ProcessIdToSessionId
QueryProcessAffinityUpdateMode
QueueUserAPC
ResumeThread
SetPriorityClass
SetProcessAffinityUpdateMode
SetProcessMitigationPolicy
SetProcessPriorityBoost
SetProcessShutdownParameters
SetThreadContext
SetThreadIdealProcessorEx
SetThreadInformation
SetThreadPriority
SetThreadPriorityBoost
SetThreadStackGuarantee
SetThreadToken
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UpdateProcThreadAttribute

Sections

.text
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 4KB - Virtual size: 581B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 4KB - Virtual size: 429B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 4KB - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 4KB - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 272B

.rodata Size: 4KB - Virtual size: 136B

.rdata Size: 4KB - Virtual size: 96B

.pdata Size: 4KB - Virtual size: 36B

.xdata Size: 4KB - Virtual size: 28B

.edata Size: 8KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 160B

/4 Size: 4KB - Virtual size: 144B

/19 Size: 4KB - Virtual size: 1KB

/31 Size: 4KB - Virtual size: 581B

/45 Size: 4KB - Virtual size: 429B

/57 Size: 4KB - Virtual size: 224B

/70 Size: 4KB - Virtual size: 41B

/81 Size: 4KB - Virtual size: 488B

.text
Size: 4KB - Virtual size: 272B

.rodata
Size: 4KB - Virtual size: 136B

.rdata
Size: 4KB - Virtual size: 96B

.pdata
Size: 4KB - Virtual size: 36B

.xdata
Size: 4KB - Virtual size: 28B

.edata
Size: 8KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 160B

/4
Size: 4KB - Virtual size: 144B

/19
Size: 4KB - Virtual size: 1KB

/31
Size: 4KB - Virtual size: 581B

/45
Size: 4KB - Virtual size: 429B

/57
Size: 4KB - Virtual size: 224B

/70
Size: 4KB - Virtual size: 41B

/81
Size: 4KB - Virtual size: 488B