api-ms-win-crt-locale-l1-1-0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

api-ms-win-crt-locale-l1-1-0.dll
Size

11KB
MD5

10c18ee8eb974e9f6382917ad3cd7d11
SHA1

3308cd7d9d29e42e137fd348b96545c206ea7096
SHA256

3a292b3ae218086edd2d136fcc9eb65e788caa6933c864908a07f004fecd9972
SHA512

a18769ce5ef8e0da4b9bf997d9c8800e9d715c54f603cac6534cadc0ade3f9c70a0e9fc2e607d1dfd6d7326f9fb4f519466cd0953591494d0376d1624d77f1de
SSDEEP

192:YFWohWCyzTbPDBQABJYpyqnaj/6g6d6q6RbwXDK/NL:gWohWZzDBRJY4ltRJRbEa

Score

1^/10

Malware Config

Signatures

Files

api-ms-win-crt-locale-l1-1-0.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:23

Not After

11/08/2018, 20:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a8:87:9d:ef:0c:81:b9:8f:3c:c6:b9:92:6c:be:23:c9:eb:88:0e:c2:e2:64:7c:69:ce:ec:3d:5d:38:b6:0d:eb
Signer

Actual PE Digest

a8:87:9d:ef:0c:81:b9:8f:3c:c6:b9:92:6c:be:23:c9:eb:88:0e:c2:e2:64:7c:69:ce:ec:3d:5d:38:b6:0d:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-locale-l1-1-0.pdb

Exports

Exports

___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

a8:87:9d:ef:0c:81:b9:8f:3c:c6:b9:92:6c:be:23:c9:eb:88:0e:c2:e2:64:7c:69:ce:ec:3d:5d:38:b6:0d:ebSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1016B

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

a8:87:9d:ef:0c:81:b9:8f:3c:c6:b9:92:6c:be:23:c9:eb:88:0e:c2:e2:64:7c:69:ce:ec:3d:5d:38:b6:0d:eb
Signer

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1016B