YAVSPOKJ[.]EXE | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YAVSPOKJ.EXE
Size

300.0MB
MD5

4402cafab808a4671de16670ea2d36e7
SHA1

ec7ce4c89b5704b883fddf022dfd650e11972c19
SHA256

d1cbef109711f37f86e810b196087b715f44ca5e54649b3636f4d7c260150010
SHA512

a75af108f7531ff8077f2da8951d3b4cbaebb8134b8be27f41ff350c4a341e2d6ed8d299b0d8a19807b3288fe6de252905a9fb11edfa252a83fccc8fdfb79cd0
SSDEEP

3072:1ctBcYJBR0A4wGXLBYLWdGrCjeww6/lndbvmbXjgpR/eR:GtBc4D0ARGLGkldvKEpRQ

Score

N/A

Malware Config

Signatures

Files

YAVSPOKJ.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ