ystpaysdk[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ystpaysdk.dll
Size

32KB
MD5

d763c1c28157e42bb52993db3519a488
SHA1

807a077d6bbc29a283159ee77301782d9a5430a7
SHA256

9202a4732f420e15da47ed7fade35f7d227be603ba92f9a89832eaac1dba471d
SHA512

85c28a0a8662d18cb8d88e556030b74b65d91f849ea98b98f1af7bc1233e777cdf8c3370b5395837b47feab4d6d70b431394ee0c9cea25ac125fd034685447da
SSDEEP

384:JeNOzC0NKicZHzQM3lGXyDEodRUWOEW3JxhRhWsxA08vv9scIW1:kcOLHZHzdlG7WOHxj8vvdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ystpaysdk.dll

Files

ystpaysdk.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Develop\C# Projects\ystpaysdk\ystpaysdk\obj\Release\ystpaysdk.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ