api-ms-win-core-threadpool-l1-2-0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-threadpool-l1-2-0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
api-ms-win-core-threadpool-l1-2-0.dll
Resource
win10v2004-20240426-en
General
-
Target
api-ms-win-core-threadpool-l1-2-0.dll
-
Size
4KB
-
MD5
4f8053e0c592b7ebbccc25c6cb379a3e
-
SHA1
3bc20886e090280bb12e8536d4794cd61fc30d1e
-
SHA256
e2a8b9e26067f7857467ab04a524ab7c48e265c50860fa5c80cc1d61dd30958e
-
SHA512
c0ac6fe059da4f3241866f758d27dc769011ffd5bec8f5381983debdcc5316952ce35f2bae95d9b7ba302fa343a0665f50ca57429405d17023f0a4a4df999548
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource api-ms-win-core-threadpool-l1-2-0.dll
Files
-
api-ms-win-core-threadpool-l1-2-0.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
CallbackMayRunLong
CancelThreadpoolIo
CloseThreadpool
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolIo
CloseThreadpoolTimer
CloseThreadpoolWait
CloseThreadpoolWork
CreateThreadpool
CreateThreadpoolCleanupGroup
CreateThreadpoolIo
CreateThreadpoolTimer
CreateThreadpoolWait
CreateThreadpoolWork
DisassociateCurrentThreadFromCallback
FreeLibraryWhenCallbackReturns
IsThreadpoolTimerSet
LeaveCriticalSectionWhenCallbackReturns
QueryThreadpoolStackInformation
ReleaseMutexWhenCallbackReturns
ReleaseSemaphoreWhenCallbackReturns
SetEventWhenCallbackReturns
SetThreadpoolStackInformation
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
SetThreadpoolTimer
SetThreadpoolTimerEx
SetThreadpoolWait
SetThreadpoolWaitEx
StartThreadpoolIo
SubmitThreadpoolWork
TrySubmitThreadpoolCallback
WaitForThreadpoolIoCallbacks
WaitForThreadpoolTimerCallbacks
WaitForThreadpoolWaitCallbacks
WaitForThreadpoolWorkCallbacks
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ