API-MS-Win-Core-LocalRegistry-L1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-localregistry-l1-1-0.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
api-ms-win-core-localregistry-l1-1-0.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-core-localregistry-l1-1-0.dll
-
Size
4KB
-
MD5
4984ce832dd9f47ec2e3aeabc2d2c63a
-
SHA1
c1cf95d44e36607501ac8cbb2047e2ceeb3670bb
-
SHA256
721c4be0b2b621de3b88e563beb4a9a54b5b4bf90907bc044961ba2859aa5125
-
SHA512
60ac5a42fa61f90c03b08ffaaeeb80022296a743558f37a19fc0cb3db66d13cb8d9545116846ce5d86454fb115c78f8823d9bf9a0bc3f43a7a29e466c3c5e01a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-core-localregistry-l1-1-0.dll
Files
-
api-ms-win-core-localregistry-l1-1-0.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyExA
RegDeleteKeyExW
RegDeleteTreeA
RegDeleteTreeW
RegDeleteValueA
RegDeleteValueW
RegDisablePredefinedCacheEx
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegFlushKey
RegGetKeySecurity
RegGetValueA
RegGetValueW
RegLoadKeyA
RegLoadKeyW
RegLoadMUIStringA
RegLoadMUIStringW
RegNotifyChangeKeyValue
RegOpenCurrentUser
RegOpenKeyExA
RegOpenKeyExW
RegOpenUserClassesRoot
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegRestoreKeyA
RegRestoreKeyW
RegSaveKeyExA
RegSaveKeyExW
RegSetKeySecurity
RegSetValueExA
RegSetValueExW
RegUnLoadKeyA
RegUnLoadKeyW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ