ext-ms-win-cluster-clusapi-l1-1-1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ext-ms-win-cluster-clusapi-l1-1-1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ext-ms-win-cluster-clusapi-l1-1-1.dll
Resource
win10v2004-20240426-en
General
-
Target
ext-ms-win-cluster-clusapi-l1-1-1.dll
-
Size
4KB
-
MD5
6f2208c996ff234da932770c1b2a168f
-
SHA1
eaa46cdd29fca0ad76f248776cdc349108b49a26
-
SHA256
81b3a55c32c25881ded571c8b6a419910b6657b19b7ac51cc9c4b55b775b936f
-
SHA512
5f53f34ef2904fcff99859fbb7cddd704d29146d55f8a45155eca4676afeefb7b5557738d8126dc05dc8021cbe7dc47affa52fd1a6b910af81e7f2861dbc998d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ext-ms-win-cluster-clusapi-l1-1-1.dll
Files
-
ext-ms-win-cluster-clusapi-l1-1-1.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
CloseCluster
CloseClusterNode
CloseClusterNotifyPort
CloseClusterResource
ClusterCloseEnum
ClusterControl
ClusterEnum
ClusterGetEnumCount
ClusterOpenEnum
ClusterRegBatchAddCommand
ClusterRegCloseBatch
ClusterRegCloseBatchEx
ClusterRegCloseKey
ClusterRegCreateBatch
ClusterRegCreateKey
ClusterRegCreateKeyForceSync
ClusterRegDeleteKey
ClusterRegDeleteKeyForceSync
ClusterRegDeleteValue
ClusterRegDeleteValueForceSync
ClusterRegEnumKey
ClusterRegOpenKey
ClusterRegQueryValue
ClusterRegSetValue
ClusterRegSetValueForceSync
ClusterResourceControl
ClusterResourceTypeCloseEnum
ClusterResourceTypeEnum
ClusterResourceTypeOpenEnum
CreateClusterNotifyPortV2
GetClusterInformation
GetClusterKey
GetClusterNodeId
GetClusterNodeState
GetClusterNotifyV2
GetNodeClusterState
OpenCluster
OpenClusterNode
OpenClusterResource
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ