api-ms-win-crt-runtime-l1-1-0[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

api-ms-win-crt-runtime-l1-1-0.zip
Size

6KB
MD5

a003e87598801f723db6a2471f0820de
SHA1

eea86e62ca932d1ca79695fa561322661dfbbb9b
SHA256

e9184337cfa22667bcd36a9b7b4c6e31485fa583955ebda1726135c1bb2a207d
SHA512

ffe557e468e7f634d8a25ddcbc9437f4a8fb8311be86314170e31099733d7af645d0a64a394cb2372f983d7dbe7fe84c59b68e620116b58ecf424465879c2bde
SSDEEP

192:EoWpqadTIeiLeghHL5U3sxetel7KBJ1xS:Ebpd8Egs3leU1xS

Score

1^/10

Malware Config

Signatures

Files

api-ms-win-crt-runtime-l1-1-0.zip
.zip
README.txt
api-ms-win-crt-runtime-l1-1-0.dll
.dll windows x64

Code Sign

33:00:00:04:20:34:d8:b8:30:51:ca:cf:76:00:00:00:00:04:20
Certificate

Issuer

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20-02-2019 22:39

Not After

31-07-2020 22:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Development Root Certificate Authority 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-05-2014 17:33

Not After

28-05-2029 17:43

Subject

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:48:69:45:ca:d1:19:82:dc:cf:8b:46:36:62:28:31:ce:0c:51:61:09:97:a2:e8:41:b2:7e:ad:da:e9:39:b2
Signer

Actual PE Digest

b4:48:69:45:ca:d1:19:82:dc:cf:8b:46:36:62:28:31:ce:0c:51:61:09:97:a2:e8:41:b2:7e:ad:da:e9:39:b2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

_Exit
__doserrno
__fpe_flt_rounds
__fpecode
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__pgmptr
__p__wcmdln
__p__wpgmptr
__pxcptinfoptrs
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__wcserror
__wcserror_s
_assert
_beginthread
_beginthreadex
_c_exit
_cexit
_clearfp
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_endthread
_endthreadex
_errno
_execute_onexit_table
_exit
_fpieee_flt
_fpreset
_get_doserrno
_get_errno
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_pgmptr
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_wide_winmain_command_line
_get_wpgmptr
_getdllprocaddr
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_query_app_type
_register_onexit_function
_register_thread_local_exe_atexit_callback
_resetstkoflw
_seh_filter_dll
_seh_filter_exe
_set_abort_behavior
_set_app_type
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_invalid_parameter_handler
_set_new_handler
_set_thread_local_invalid_parameter_handler
_seterrormode
_sleep
_statusfp
_strerror
_strerror_s
_wassert
_wcserror
_wcserror_s
_wperror
_wsystem
abort
exit
feclearexcept
fegetenv
fegetexceptflag
fegetround
feholdexcept
fesetenv
fesetexceptflag
fesetround
fetestexcept
perror
quick_exit
raise
set_terminate
signal
strerror
strerror_s
system
terminate

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:20:34:d8:b8:30:51:ca:cf:76:00:00:00:00:04:20Certificate

Extended Key Usages

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03Certificate

Key Usages

b4:48:69:45:ca:d1:19:82:dc:cf:8b:46:36:62:28:31:ce:0c:51:61:09:97:a2:e8:41:b2:7e:ad:da:e9:39:b2Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.rdata Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 1008B

33:00:00:04:20:34:d8:b8:30:51:ca:cf:76:00:00:00:00:04:20
Certificate

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

b4:48:69:45:ca:d1:19:82:dc:cf:8b:46:36:62:28:31:ce:0c:51:61:09:97:a2:e8:41:b2:7e:ad:da:e9:39:b2
Signer

.rdata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 1008B