api-ms-win-crt-heap-l1-1-0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-crt-heap-l1-1-0.dll
Size

11KB
MD5

156da44de8586202cd7badda883b5994
SHA1

de58f32e2172d31a55df26f0d9a0c5ac9880efdd
SHA256

6e0460ea48738b50c8628038368e4e4b425fb6aa5de76f7fe06f2473fabc0e9e
SHA512

a80a316db9fd3f6907e28771bd39c00244f510096eab3daf617c65962bb223c728505a40dc2c3f651cc49df5d7bfa6f660ea1f9889aeb2bcf9b93a2eb6c0503e
SSDEEP

192:XwY17aFBRkWohWzuyzTbPDBQABJgSqnajE49dFXKehI9:XpNWohWz9zDBRJblPYWC

Score

1^/10

Malware Config

Signatures

Files

api-ms-win-crt-heap-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:23

Not After

11/08/2018, 20:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

de:fa:ab:a5:60:bb:4f:8f:32:14:97:b5:56:b7:e9:78:52:bb:fa:da:22:6e:4e:00:2d:9d:c2:1d:2c:2e:d8:72
Signer

Actual PE Digest

de:fa:ab:a5:60:bb:4f:8f:32:14:97:b5:56:b7:e9:78:52:bb:fa:da:22:6e:4e:00:2d:9d:c2:1d:2c:2e:d8:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-heap-l1-1-0.pdb

Exports

Exports

_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_callnewh
_calloc_base
_expand
_free_base
_get_heap_handle
_heapchk
_heapmin
_heapwalk
_malloc_base
_msize
_query_new_handler
_query_new_mode
_realloc_base
_recalloc
_set_new_mode
calloc
free
malloc
realloc

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

de:fa:ab:a5:60:bb:4f:8f:32:14:97:b5:56:b7:e9:78:52:bb:fa:da:22:6e:4e:00:2d:9d:c2:1d:2c:2e:d8:72Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1016B

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

de:fa:ab:a5:60:bb:4f:8f:32:14:97:b5:56:b7:e9:78:52:bb:fa:da:22:6e:4e:00:2d:9d:c2:1d:2c:2e:d8:72
Signer

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1016B