API-MS-Win-Core-Localization-L1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-localization-l1-1-0.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
api-ms-win-core-localization-l1-1-0.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-core-localization-l1-1-0.dll
-
Size
4KB
-
MD5
7101b07c7a065c6fd618e1f69971a88d
-
SHA1
560498b0283daaa4da9ed67930a09098f6e7bd7a
-
SHA256
5cbea2df1d8ea3077f10a8765981bfc943e9c02bba9800a94818d619c19714ab
-
SHA512
53b0db640ce93d4b504901d1078005f6431a7e91477a8aa9b7f49ca98beb2189df5640a9bd5228f6ef6d2e8682964ef4618ddd45082c9fd4a212f7a4590c653f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-core-localization-l1-1-0.dll
Files
-
api-ms-win-core-localization-l1-1-0.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
ConvertDefaultLocale
FindNLSString
FindNLSStringEx
GetACP
GetCPFileNameFromRegistry
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserPreferredUILanguages
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
LCMapStringEx
LCMapStringW
LocaleNameToLCID
NlsCheckPolicy
NlsEventDataDescCreate
NlsGetCacheUpdateCount
NlsUpdateLocale
NlsUpdateSystemLocale
NlsWriteEtwEvent
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetThreadLocale
VerLanguageNameA
VerLanguageNameW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ