Static task
static1
Behavioral task
behavioral1
Sample
yugo.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
yugo.exe
Resource
win10v2004-20220901-en
General
-
Target
yugo.exe
-
Size
6.2MB
-
MD5
48f67eaf2e3d43e63016031295d95311
-
SHA1
7d87ffe212820b4addd76b942fd8632454322073
-
SHA256
87a5d48a52b54af52904dfebdd7b5628e804457cf5efb291a8d9af1564faecd2
-
SHA512
318ea5607956c8bd9a63709dff91a1e222b0ae7aa93cb193c43a41ca19a128cd937123cfd5903fd555212cdd8d085d3ae859b4cd2fd7d68db3e448cb6517b827
-
SSDEEP
49152:tZKTm3sAT4+jdwUfr05wLN6+Gou1+i2eq/NrtUFGO/wNjFAxSaUh61P1:tcTmzF5D05yN6n8xFrtUbwNtaVZ
Malware Config
Signatures
Files
-
yugo.exe.exe windows x86
476f92c8f9ddbcb805cdc5c61fbc5635
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtContinue
Sections
Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ