api-ms-win-core-kernel32-legacy-l1-1-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-kernel32-legacy-l1-1-0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
api-ms-win-core-kernel32-legacy-l1-1-0.dll
Resource
win10v2004-20240508-en
General
-
Target
api-ms-win-core-kernel32-legacy-l1-1-0.dll
-
Size
4KB
-
MD5
5d5fc28a6dd08980f80562150cfb31f8
-
SHA1
b331f648d59ce35375fe6d35b1e90795a70a5718
-
SHA256
ebadc709db277388379d3823706dbd5a89226b76b1c30b58bfddc7269fedf760
-
SHA512
b74efdebbc57d5f46ef01888af54ddcdf4b9e4386a0c10c99a9dc8a9ce550b785203d42d17b0062350d75645331223d77c92719fef92f4b469290d7a983a649d
-
SSDEEP
48:6yNDIYp4/QqI6ik/gx8gEh6GCGsolW/xhj0O6x0GIZWUnfBI56h/5Wwa:xN74omiekRLNxx0O6vEW4UohWw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-core-kernel32-legacy-l1-1-0.dll
Files
-
api-ms-win-core-kernel32-legacy-l1-1-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
AddLocalAlternateComputerNameW
BackupRead
BackupWrite
BindIoCompletionCallback
CopyFileA
CopyFileW
CreateFileMappingA
CreateFileTransactedW
CreateMailslotA
CreateNamedPipeA
CreateSemaphoreW
DnsHostnameToComputerNameW
DosDateTimeToFileTime
FatalAppExitA
FatalAppExitW
FileTimeToDosDateTime
FindResourceA
FindResourceExA
FindResourceW
GetComputerNameA
GetComputerNameW
GetConsoleWindow
GetDurationFormatEx
GetMaximumProcessorGroupCount
GetNamedPipeClientProcessId
GetNamedPipeServerProcessId
GetShortPathNameA
GetStartupInfoA
GetStringTypeExA
GetSystemPowerStatus
GetSystemWow64DirectoryA
GetSystemWow64DirectoryW
GetTapeParameters
GetTempPathA
GetThreadSelectorEntry
GlobalMemoryStatus
LoadLibraryA
LoadLibraryW
MoveFileA
MoveFileExA
MoveFileW
MulDiv
OpenFile
PulseEvent
RaiseFailFastException
RegisterWaitForSingleObject
SetConsoleTitleA
SetFileCompletionNotificationModes
SetHandleCount
SetMailslotInfo
SetVolumeLabelW
UnregisterWait
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ