DllMain
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
Static task
static1
Behavioral task
behavioral1
Sample
yklite.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
yklite.dll
Resource
win10v2004-20240802-en
Target
yklite.dll
Size
53KB
MD5
a5768460a7eeddfcf54faaea24b83b55
SHA1
a26be757de115623b9f568f22bf5e75d87ce6a87
SHA256
ed7d0e723dbd4545c5b0e0d374f13afa8d2d94094b00472735d98463aab42d3b
SHA512
90d309654012ea2337e80c5cbf955218badcacbf92f0bcd9e0aa748dfd52839e3a064b07b77dae42a6c4399bef26bdaa3fa3b8748328143df443519ff6bbfa87
SSDEEP
1536:Gt64VvOQfwIxKkeg4qVGjW3RKBnro6dMmcxTF:Gt6CWQZTeeVGj+KBdrcxT
Checks for missing Authenticode signature.
resource |
---|
yklite.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddAtomA
AllocConsole
CloseHandle
CreateToolhelp32Snapshot
DeleteAtom
DeleteCriticalSection
EnterCriticalSection
FindAtomA
FlushInstructionCache
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemInfo
GetThreadContext
GetTickCount
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
OpenProcess
OpenThread
ReadProcessMemory
ResumeThread
RtlCaptureStackBackTrace
SetThreadContext
Sleep
SuspendThread
Thread32First
Thread32Next
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_getch
_initterm
_lock
_putws
_unlock
_wfopen
abort
atoi
calloc
fgets
fputc
free
freopen
fwrite
getenv
localeconv
malloc
memchr
memcmp
memcpy
memset
puts
realloc
strchr
strcpy
strerror
strlen
strncmp
strncpy
system
vfprintf
wcscpy
wcslen
wcsrchr
_strtoui64
_putenv
DllMain
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ