API-MS-Win-Core-Url-L1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-url-l1-1-0.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
api-ms-win-core-url-l1-1-0.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-core-url-l1-1-0.dll
-
Size
3KB
-
MD5
43af038871a5a9b95469033ab484926e
-
SHA1
e3e4236351b9d54b5c837572d0ffd00e16f606c2
-
SHA256
c636f9007a5f59930b02c78811eb29be09a7afbac78ce7a152979543222f6942
-
SHA512
cd317e9b4412b99bbb74360a8d8ba87874546d2c0c10c6cfb62a8be3b2a35c64b27b0414b78f49dc655b91ca89dba197bcfbd9576d30de2cba9c2269392dedc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-core-url-l1-1-0.dll
Files
-
api-ms-win-core-url-l1-1-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
GetAcceptLanguagesA
GetAcceptLanguagesW
HashData
IsInternetESCEnabled
ParseURLA
ParseURLW
PathCreateFromUrlA
PathCreateFromUrlAlloc
PathCreateFromUrlW
PathIsURLA
PathIsURLW
UrlApplySchemeA
UrlApplySchemeW
UrlCanonicalizeA
UrlCanonicalizeW
UrlCombineA
UrlCombineW
UrlCompareA
UrlCompareW
UrlCreateFromPathA
UrlCreateFromPathW
UrlEscapeA
UrlEscapeW
UrlFixupW
UrlGetLocationA
UrlGetLocationW
UrlGetPartA
UrlGetPartW
UrlHashA
UrlHashW
UrlIsA
UrlIsNoHistoryA
UrlIsNoHistoryW
UrlIsOpaqueA
UrlIsOpaqueW
UrlIsW
UrlUnescapeA
UrlUnescapeW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ