api-ms-win-security-cryptoapi-l1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-security-cryptoapi-l1-1-0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
api-ms-win-security-cryptoapi-l1-1-0.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-security-cryptoapi-l1-1-0.dll
-
Size
4KB
-
MD5
f64338f0afc4670fb9a21b29b8f19f33
-
SHA1
ff044feaf525a0eaede20660db1ce6935562a1b8
-
SHA256
88316ade98c294189af55b54e4e25768c4a7f0b76bf237d938b8d441afe060cf
-
SHA512
3218be697e9dfa7c33686503922a8b823558730b78b7377cd764d801ba92b277dd6124185f7d7deeeff77f00678c4bf1365c9bb0ce6d52e4d23d4e72410768b8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-security-cryptoapi-l1-1-0.dll
Files
-
api-ms-win-security-cryptoapi-l1-1-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
CryptAcquireContextA
CryptAcquireContextW
CryptContextAddRef
CryptCreateHash
CryptDecrypt
CryptDeriveKey
CryptDestroyHash
CryptDestroyKey
CryptDuplicateHash
CryptDuplicateKey
CryptEncrypt
CryptEnumProviderTypesA
CryptEnumProviderTypesW
CryptEnumProvidersA
CryptEnumProvidersW
CryptExportKey
CryptGenKey
CryptGenRandom
CryptGetDefaultProviderA
CryptGetDefaultProviderW
CryptGetHashParam
CryptGetKeyParam
CryptGetProvParam
CryptGetUserKey
CryptHashData
CryptHashSessionKey
CryptImportKey
CryptReleaseContext
CryptSetHashParam
CryptSetKeyParam
CryptSetProvParam
CryptSetProviderA
CryptSetProviderExA
CryptSetProviderExW
CryptSetProviderW
CryptSignHashA
CryptSignHashW
CryptVerifySignatureA
CryptVerifySignatureW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ