Static task
static1
Behavioral task
behavioral1
Sample
Yimen Error 6/Yimen Error 6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Yimen Error 6/Yimen Error 6.exe
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
Yimen Error 6/Yimen Error 6.exe
Resource
win10v2004-20220812-en
General
-
Target
yimen-error-6.zip
-
Size
43.8MB
-
MD5
97a40df5e21df9a752cd2bee280fcccc
-
SHA1
92346e70c13cb22772f298e4c81a4ffc243cfc8f
-
SHA256
73e97bd3ddd39bb3bc556ad2b2c1b7a1a8f0299ebe0f13c0c4329a02a00fa5d9
-
SHA512
3756fe46b649a20e8ad0a39e25ae74c9410d4b202830387d5d392e2e2da486321378c39788a79a2373233b1dccc40cac429b074dfb157d54d0816d32c52021b6
-
SSDEEP
786432:z8rc864hjKbPSV+heUKfuHFXzFFc7bsRrTQ+dqQNz/7Tv9Eyd8hCM:wA86gOS+ayFX47OrTdThnVNZM
Malware Config
Signatures
Files
-
yimen-error-6.zip.zip
-
Yimen Error 6/Read Me Before Playing Yimen Error 6.txt
-
Yimen Error 6/Yimen Error 6.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56.1MB - Virtual size: 56.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ