XYMES[.]LOT[.]WINUI[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XYMES.LOT.WINUI.dll
Size

1.4MB
MD5

9cea188fcaf8d38fd2c645a52f1441d3
SHA1

74acbf933bef29ecb997b6115e81ed8250d71aed
SHA256

a9435df13da8e481745f4255b8db065c9a353deb7562fdba4a5cc14b9f02f9a3
SHA512

9412a59df5246e96cfe97809746edca05aac57aed18b1888201d72a644e90d52d5db3fc81ea979b1ec72fe0bb93a18ae2fbac931c31a4ffa731822323de3bd62
SSDEEP

12288:0V4WBZhbhIqHetix0BcEkzub15mBJPhhsZfswdOKGX4fDIw7W9m42Hva/qmUiJHK:58hbSfBp4u6PC+8HLpBJj4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XYMES.LOT.WINUI.dll

Files

XYMES.LOT.WINUI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\work\优博讯\Code\XYMES\LOT\obj\Debug\XYMES.LOT.WINUI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ