Static task
static1
Behavioral task
behavioral1
Sample
Yimen Error/Yimen Error.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Yimen Error/Yimen Error.exe
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
Yimen Error/Yimen Error.exe
Resource
win10v2004-20220901-en
General
-
Target
yimen-error.zip
-
Size
14.5MB
-
MD5
2c16fa16a5f36217244337d54e5b4e23
-
SHA1
e3448597d7edf9c5468ca717ef26f8277b253ca9
-
SHA256
9c13c5b4344bab250d7918b69ffea4c3891c4a3a8be56c210a38301f53a2aa68
-
SHA512
623d5b921e88d55aef80bdccb19d0802ed227410c467cc8f5c4125bce0e305c96caeee5f79a89806ba012a49d291828ea99814da4eafd5eb5456496307a43d80
-
SSDEEP
393216:mW89MV1JaCIoEp19FCdwVX0wHKGhLu6Ch:mRKn0bzTFCdSbqGhO
Malware Config
Signatures
Files
-
yimen-error.zip.zip
-
Yimen Error/About Yimen Error.txt
-
Yimen Error/Yimen Error.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 20.6MB - Virtual size: 20.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ