bankyaroll[.]dll | Triage™

Resubmissions

30/06/2026, 17:52

260630-wfs58set4s

30/06/2026, 17:51

260630-wfbaeset3v3

Sharing

Copy URL Twitter E-mail

General

Target
bankyaroll.dll
Size 47.6MB
Sample260630-wfs58set4s
SHA256 5342bc9d71ce7c4f619ba1f60029d6942c45aee674279b0dba36da8d1b5b16c9
MD5 edb438f71990c694a529e432ea2a0dfe
SHA1 67f1b583b1941013e16422e22b47f34f26edf49e
SHA512 c9f1a67d541955d053732fd5643c4ef01ce664d2098c0d6019aef613e589584f9c83616ff439eeb7532a56adc51bb91bb5fa6bda5a96647a54c5080adfe63d7b
SSDEEP 786432:zlukpxyScrm5Aapwkh2vqqv5f3lC7yFHmUPf9mw59rwqqK5setMc618Hp:k1ScIAapwkhyfPHmUPVZ59rwqqKIcX
TLSH
T148B70142A552EA88C59A8078930E6AAAE632B5073F76FCFF404551523195BCD6FFCF03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bankyaroll.dll

File Explorer

bankyaroll.dll

.dll 47.6MB

bankyaroll.dll

IMPHASH eee0ae7674972996b4676b3464276b3e
SHA256 5342bc9d71ce7c4f619ba1f60029d6942c45aee674279b0dba36da8d1b5b16c9
MD5 edb438f71990c694a529e432ea2a0dfe
SHA1 67f1b583b1941013e16422e22b47f34f26edf49e
SHA512 c9f1a67d541955d053732fd5643c4ef01ce664d2098c0d6019aef613e589584f9c83616ff439eeb7532a56adc51bb91bb5fa6bda5a96647a54c5080adfe63d7b
SSDEEP 786432:zlukpxyScrm5Aapwkh2vqqv5f3lC7yFHmUPf9mw59rwqqK5setMc618Hp:k1ScIAapwkhyfPHmUPVZ59rwqqKIcX
TLSH
T148B70142A552EA88C59A8078930E6AAAE632B5073F76FCFF404551523195BCD6FFCF03
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

396904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\source\cracks\bankyaroll\x64\Release\bankyaroll.pdb

kernel32

VirtualProtect VirtualAlloc GetModuleHandleA Sleep LoadLibraryA CreateThread GetProcAddress ExitProcess SizeofResource FindResourceA CreateMutexA ResumeThread LockResource GetSystemInfo LoadResource AddVectoredExceptionHandler GetThreadContext SetThreadContext AllocConsole HeapCreate HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread CreateToolhelp32Snapshot GetLastError HeapReAlloc CloseHandle HeapAlloc GetCurrentProcessId FlushInstructionCache OpenThread VirtualFree VirtualQuery FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind LocalFree UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead

user32

MessageBoxA wsprintfA

msvcp140

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??7ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?_Xbad_alloc@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Syserror_map@std@@YAPEBDH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Winerror_map@std@@YAHH@Z ?_Id_cnt@id@locale@std@@0HA

winmm

PlaySoundA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate __C_specific_handler __std_exception_destroy memcmp memcpy __current_exception __current_exception_context memset _CxxThrowException __std_exception_copy __std_type_info_destroy_list memmove

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-stdio-l1-1-0

fgetc fclose fflush fputc fgetpos setvbuf __stdio_common_vfprintf ungetc __acrt_iob_func fsetpos fread freopen_s _get_stream_buffer_pointers fwrite _fseeki64

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-runtime-l1-1-0

terminate _seh_filter_dll _configure_narrow_argv abort _initialize_narrow_environment _initterm_e _initterm _initialize_onexit_table _cexit _crt_atexit _errno _invalid_parameter_noinfo_noreturn system _register_onexit_function _execute_onexit_table

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func