api-ms-win-core-localization-l1-1-0[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-core-localization-l1-1-0.dll
Size

4KB
MD5

133d64050b6352e6ec3ec5d4eb237430
SHA1

785e307889f9fb364880e151b1119606584321e6
SHA256

f1975ff00edbd1bed2eb89d40c08937405aa8a22ddf0044c099e0d1b821b6212
SHA512

6d580484716e2eebdece23d3c06eaa85da82e59bcd437012d5a730023522596cdc39e7e4d862bdda887c70894e73e58dc69cba3522f2bbe1d4c466d82f4fe687

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
api-ms-win-core-localization-l1-1-0.dll

Files

api-ms-win-core-localization-l1-1-0.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

API-MS-Win-Core-Localization-L1-1-0.pdb

Exports

Exports

ConvertDefaultLocale
FindNLSString
FindNLSStringEx
GetACP
GetCPFileNameFromRegistry
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserPreferredUILanguages
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
LCMapStringEx
LCMapStringW
LocaleNameToLCID
NlsCheckPolicy
NlsEventDataDescCreate
NlsGetCacheUpdateCount
NlsUpdateLocale
NlsUpdateSystemLocale
NlsWriteEtwEvent
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetThreadLocale
VerLanguageNameA
VerLanguageNameW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ