DllRegisterServer
EntryFunct
abyullxly
fzzaafazlnakw
gerfdscqqqwpmr
init
jmryclz
jzgryhgonunp
maennktsxcjicqjdr
mbirfjbv
nmapbxeuqnfgvxw
oakucfpgrkfkaiuz
sbjgjnpzgjueucd
utsdadzenygql
xxfrztc
yjgzodg
zznvwiuhlenywafa
Static task
static1
Behavioral task
behavioral1
Sample
yamwyjefplho.dll
Resource
win10-20230703-en
Target
yamwyjefplho.dll
Size
382KB
MD5
f8cead21f996f77a3f0ac3fc8bd56aa4
SHA1
771558272d10a21ee6fe75a2e26f972dc0e655c7
SHA256
1e36a7904ba39e4f387769c63734200fc42e474efbd7bea66dfc3f60811d169e
SHA512
6996008a23b39864327e02db94b6939766a5f924500e22f0242519ef6dbeb786ca34db8427d1a8065cb2eca42f5a1c809494af2b8dae34941ffc660335853298
SSDEEP
6144:xQNRr0exDsttwn68Z1ZeQNRr0exDsttwnB8Z1Z:2PlxvXPl0v
Checks for missing Authenticode signature.
resource |
---|
yamwyjefplho.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
LoadLibraryA
GetLastError
GetProcessHeap
GetCurrentThreadId
GetEnvironmentStringsW
IsDebuggerPresent
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
FreeEnvironmentStringsW
LCMapStringW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
DllRegisterServer
EntryFunct
abyullxly
fzzaafazlnakw
gerfdscqqqwpmr
init
jmryclz
jzgryhgonunp
maennktsxcjicqjdr
mbirfjbv
nmapbxeuqnfgvxw
oakucfpgrkfkaiuz
sbjgjnpzgjueucd
utsdadzenygql
xxfrztc
yjgzodg
zznvwiuhlenywafa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ