api-ms-win-crt-filesystem-l1-1-0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-crt-filesystem-l1-1-0.dll
Size

13KB
MD5

0a00add7f7bc5916e1f3edc7ee8199f9
SHA1

555c523ed821b6c6d9f15371d15493862f2a6926
SHA256

3d2bafa2401af3db0d9e6011d3d97f34e4d44cee5ffa3d9d68377c324c1c46ac
SHA512

b761ee4ab7a0b2b5d2b34fec4ca5cdfb69d38beb5767e15621e9125fc37335ab6a633219538dcc9573cf028f20b0ebd26b91a142c1e5f3ba3c0be277521a27d8
SSDEEP

192:P7q6nWlC0i5Cl91WCu7hWIzBODBQABJXluI57qnajqg1jKbJ7y:zq6nWm5C9WphWTDBRJHlx1jmy

Score

1^/10

Malware Config

Signatures

Files

api-ms-win-crt-filesystem-l1-1-0.dll
.dll windows:10 windows x86 arch:x86

Code Sign

33:00:00:01:06:6e:c3:25:c4:31:c9:18:0e:00:00:00:00:01:06
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/10/2016, 20:39

Not After

11/01/2018, 20:39

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

41:4d:2e:76:3f:6e:73:81:c7:94:5b:cf:a5:f7:04:b7:19:00:5b:b4:ab:4a:2c:50:be:85:64:2b:f6:5a:a0:19
Signer

Actual PE Digest

41:4d:2e:76:3f:6e:73:81:c7:94:5b:cf:a5:f7:04:b7:19:00:5b:b4:ab:4a:2c:50:be:85:64:2b:f6:5a:a0:19

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-filesystem-l1-1-0.pdb

Exports

Exports

_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:06:6e:c3:25:c4:31:c9:18:0e:00:00:00:00:01:06Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

41:4d:2e:76:3f:6e:73:81:c7:94:5b:cf:a5:f7:04:b7:19:00:5b:b4:ab:4a:2c:50:be:85:64:2b:f6:5a:a0:19Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 1024B

33:00:00:01:06:6e:c3:25:c4:31:c9:18:0e:00:00:00:00:01:06
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

41:4d:2e:76:3f:6e:73:81:c7:94:5b:cf:a5:f7:04:b7:19:00:5b:b4:ab:4a:2c:50:be:85:64:2b:f6:5a:a0:19
Signer

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 1024B