x0YB4GYNRIq[.]dll | Triage™

General

Target
x0YB4GYNRIq.dll
Size 323KB
Sample220707-pc7qwsabb5
SHA256 959027fcabea3fe49af89f34232ef5afdeda405b03e8b3c18feae350df791c41
MD5 d64005ef7bbd79d7361105b1e3bf8c51
SHA1 9036125f9cbed2b29795e3506971c8ea738a3d32
SHA512 726f4d6a7a686d38bd75c93b0c97c0818ef204c8461e647a7a0302923442f73dfb115e72ffba9e96703c487e6324d1490c20919e7a6d3cd88ccc813689e28c2f
SSDEEP 6144:APWA/nGhZPFrHhI0fSnkcJdDsf2dLPJViqiVTN1H3946yBPE5Eyi:APfuhZPDazJOf8KVxZ394tPE5X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

x0YB4GYNRIq.dll

.dll 323KB

x0YB4GYNRIq.dll

IMPHASH 82e76878f3d73e2f9e0fdc5dfcbc7363
SHA256 959027fcabea3fe49af89f34232ef5afdeda405b03e8b3c18feae350df791c41
MD5 d64005ef7bbd79d7361105b1e3bf8c51
SHA1 9036125f9cbed2b29795e3506971c8ea738a3d32
SHA512 726f4d6a7a686d38bd75c93b0c97c0818ef204c8461e647a7a0302923442f73dfb115e72ffba9e96703c487e6324d1490c20919e7a6d3cd88ccc813689e28c2f
SSDEEP 6144:APWA/nGhZPFrHhI0fSnkcJdDsf2dLPJViqiVTN1H3946yBPE5Eyi:APfuhZPDazJOf8KVxZ394tPE5X
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

66912

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetVersionExA FormatMessageA LocalFree GetCurrentProcess CloseHandle VirtualAlloc GetLastError SetStdHandle FlushFileBuffers HeapReAlloc HeapFree HeapAlloc GetProcAddress GetModuleHandleA ExitProcess ReadConsoleInputA SetConsoleMode GetConsoleMode WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId FlsSetValue GetCommandLineA GetProcessHeap HeapSetInformation HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameA FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlUnwindEx LoadLibraryA InitializeCriticalSection CreateFileA RtlVirtualUnwind RtlLookupFunctionEntry GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP

user32

MessageBoxA

advapi32

SetSecurityDescriptorOwner LookupAccountNameA IsValidSid CopySid OpenProcessToken GetTokenInformation LsaAddAccountRights LsaStorePrivateData LsaOpenPolicy LsaNtStatusToWinError AddAce GetAce GetAclInformation AddAccessDeniedAce InitializeAcl GetLengthSid AddAccessAllowedAce DeleteAce EqualSid RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA LookupAccountSidA FreeSid SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor AllocateAndInitializeSid GetSecurityDescriptorDacl MakeAbsoluteSD GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSecurityDescriptorLength RegCreateKeyExA MakeSelfRelativeSD LsaFreeMemory LsaClose LsaRetrievePrivateData

ole32

CoTaskMemFree CoTaskMemAlloc CoInitialize

Sharing