youtube[.]mov | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
youtube.mov
Size 214KB
Sample220525-2sw1jsaefr
SHA256 d21d616f6052e8b62292fcc6d9fd9ee2a3b549c59ca76aa8ef5a96cd163512ac
MD5 9a4ef0169f86641aa99017049de272f5
SHA1 82e1a3868eff88753fe30abedf7c83620aaddd13
SHA512 9b9bff3e64ee7f060679b3ff8704b8f89057748906198c674e7ebec7a51e33023af119997877790837389905090d57559eadc49811f53973b7ed91f3552c9e84
SSDEEP 6144:VW2ARP1XewB7c6waMtO507a3DXx3FqcZSV:VWdRcwNC1o58afqcZSV
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

youtube.mov

.dll 214KB

youtube.mov

IMPHASH 7c661725970e2285630167e2c43a72e6
SHA256 d21d616f6052e8b62292fcc6d9fd9ee2a3b549c59ca76aa8ef5a96cd163512ac
MD5 9a4ef0169f86641aa99017049de272f5
SHA1 82e1a3868eff88753fe30abedf7c83620aaddd13
SHA512 9b9bff3e64ee7f060679b3ff8704b8f89057748906198c674e7ebec7a51e33023af119997877790837389905090d57559eadc49811f53973b7ed91f3552c9e84
SSDEEP 6144:VW2ARP1XewB7c6waMtO507a3DXx3FqcZSV:VWdRcwNC1o58afqcZSV
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

57084

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AllCould EproyAklW GreatTime K8gtUyBU85E3LdoC4oKuCIqy6iSTmtP3T6Sm PeopleInto Vh6o14u athmapsfpn atzvsseowrtkeah awntlojgauvblc bbpihemquvxygo bcwgwvvj bfoqeqhooi bzsaujo cfuavpyyenwjks cyofyzxtnknrqkx dbjmqianlsobc docithfphcphnnr dohdzsd dwjblawjorlltigys eauukrzodvljbgvv eikrcewf fmiixoqoldctlq fokyrdeliel gepwrdlbedvqghsf gffagmbreuh gjmlknio gmizstonkn gnnehxlhurksvjci gpizvzyrbikqr gqqboryzu gvjexuvqcepyjqq iplahwmjygh iptfshnnvkgekg ividpqiwjxh jA7y7lVMs jjbmxij jshwwqm jxcjtmumkrx kloyndqjqlkqkdl klylqequ liemfilutxy lllgyjxtlblmahk lsxryyfzxcxeu ltimlptawslnqquk mgjjbfvoyeubft mxntioypu mxtfiidciu mztecqx nyygjattdanslme oozhzokxjuy oyymgvyfvspx pgfvysvbklvjpxcrv plnxfaumqub plueprcdmfrfgmcfe pncticmuctncn ppxahqka qDw6l2pm qienqmwrpubqvmc qreglkoynv qrktyitkpw qrvtkqfabr rwvwjkikgufgtvkd scsdwqsov sjzzeuhz soooxqwnxodbxgg soqfxpmr stmzhystjrpndyp stncavogzjqtz tmrtresjfnswaxmjt tqpgqkbayhhybayb tskiduej uaqizddnufpprbwnp ucswshikelv uqxdiea uxniccaoslsoho vsheqzt vvjeomnmvwn vwwlctixqynqgh xeesgmehxyhnph xhgkwruzbiex xhrxirurkgop yfgsmvwbzz yjtlloxhbhn yrtzinsl yyrpvhukwhlm zplnvwv zqkcicmlqcvtyaqh

Name

.text

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

40KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.voltbl

Size

512B

Virtual Size

42B

Characteristics

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

youtube.mov

kernel32