Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
yalive.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
yalive.dll
Resource
win10v2004-20231222-en
Target
4be72a08669a43f9c08bfd232a25a52d
Size
346KB
MD5
4be72a08669a43f9c08bfd232a25a52d
SHA1
3ddb40b0ac85adb241feda7134b52e0b8126cdcc
SHA256
0fe999ba46fca3a3a15d70e2e326f002088e96221a921672b585b12bd9dc7ae1
SHA512
0a90a5607715839a36bd6c21d3526695b7515b49333eb439c835c797b5c933d6df20c3c77f43017c1c2a39f932a096ac66fc1fb2cc6d25eae7931fa1ec2d5786
SSDEEP
6144:m1M59VmSzEqFtcXzrPMS1V+F6qQ1FoQVpVDOepv1toTk+dZlUu0H:m1M5bZzEqF8rES1V+e1WRovzQ3UhH
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
CreateMutexA
lstrcpyA
lstrcmpiA
WaitForSingleObject
GetTickCount
GetTempPathA
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
MultiByteToWideChar
lstrcatA
ReadFile
SetFilePointer
WideCharToMultiByte
WinExec
LockResource
SizeofResource
LoadResource
FindResourceA
CloseHandle
GetACP
CreateDirectoryA
GetEnvironmentVariableA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
MoveFileExA
CopyFileA
ExpandEnvironmentStringsA
GetCurrentProcess
InterlockedDecrement
SetEvent
WaitForMultipleObjects
ResetEvent
CreateEventA
lstrlenW
LoadLibraryExA
SetErrorMode
LocalFree
GetSystemDirectoryA
CreateProcessA
GetVolumeInformationA
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
GetShortPathNameA
GetTempFileNameA
InterlockedExchange
GlobalAlloc
DeviceIoControl
GlobalFree
CreateFileA
GetVersionExA
VirtualQuery
GetModuleFileNameA
DeleteFileA
MoveFileA
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
lstrlenA
CallWindowProcW
GetClassNameA
MessageBoxA
GetDesktopWindow
EnableWindow
SetWindowTextA
GetForegroundWindow
IsIconic
SetWindowLongA
CallWindowProcA
PostQuitMessage
PeekMessageA
GetPropA
GetParent
GetClientRect
FlashWindowEx
PostMessageA
FindWindowExA
wsprintfA
LoadIconA
LoadStringA
IsWindow
LoadBitmapA
DestroyWindow
DestroyIcon
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
GetMessageA
ShowWindow
SetWindowPos
ScreenToClient
GetWindowRect
GetDlgItem
CreateDialogParamA
RemovePropA
KillTimer
SetTimer
SetPropA
SendMessageA
IsWindowUnicode
SetWindowLongW
GetSystemMetrics
SetForegroundWindow
GetAncestor
GetCapture
GetDC
GetMessagePos
GetSysColor
ReleaseDC
SetCapture
ReleaseCapture
LoadCursorA
SetCursor
BeginPaint
GetWindowTextA
DrawTextA
EndPaint
DialogBoxParamA
InvalidateRect
CheckDlgButton
IsDlgButtonChecked
EndDialog
ExitWindowsEx
SetDlgItemTextA
LoadImageA
IsWindowVisible
GetObjectA
GetPixel
SelectObject
SetTextColor
CreateFontIndirectA
SetBkColor
DeleteObject
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyA
RegEnumValueA
OpenProcessToken
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
GetUserNameA
LookupPrivilegeValueA
ShellExecuteA
StringFromIID
OleInitialize
CoGetMalloc
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
OleUninitialize
SysAllocString
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
VariantInit
SysFreeString
VariantClear
LoadTypeLi
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
PathAppendA
SHDeleteValueA
SHDeleteEmptyKeyA
SHRegOpenUSKeyA
SHRegEnumUSKeyA
SHRegCloseUSKey
SHDeleteKeyA
PathFileExistsA
SHGetValueA
SHSetValueA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
URLDownloadToFileA
Netbios
_strupr
_itoa
_mbsnbcpy
_snprintf
atol
memcpy
strlen
_mbsstr
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_onexit
__dllonexit
_CxxThrowException
toupper
wcscpy
wcslen
wcscmp
_mbsnbcmp
_mbscmp
_stricmp
rewind
_strnicmp
fwrite
_ftol
sprintf
strchr
sscanf
srand
rand
free
fread
malloc
atoi
time
strstr
_beginthreadex
_except_handler3
strcmp
memcmp
fgets
_mbsicmp
strncat
_strlwr
strcpy
isalnum
memmove
??2@YAPAXI@Z
_vsnprintf
strcat
fopen
fseek
fprintf
ftell
fclose
strncpy
strrchr
__CxxFrameHandler
memset
_mbsnbcat
SetupIterateCabinetA
HttpSendRequestA
InternetOpenA
HttpOpenRequestA
InternetConnectA
InternetGetConnectedState
InternetCrackUrlA
HttpQueryInfoA
InternetSetStatusCallback
InternetCloseHandle
InternetReadFile
Action
ActionEx
CheckIntegrity
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EventInvoke
Install
SCEventInvoke
SetSysInfo
Version
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ