Static task
static1
Behavioral task
behavioral1
Sample
yEkCN.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
yEkCN.exe
Resource
win10v2004-20230220-en
General
-
Target
yEkCN.exe.sample.zip
-
Size
1.0MB
-
MD5
43cd2622d250fd1dfc6664e8961fd914
-
SHA1
81b12af7db3360516e0d8a5c1804c48300d46602
-
SHA256
e77ddebb1f617fe4af502f586e7719f1ec3b2f9c818bb98a484da7becb9e73c3
-
SHA512
19116d1d3b750c8439654f8ca79ed1c6892d9174084a6fd7ce7a92d42c5532bb241987aa775cd44adf6a09330d0138be9aa23af7d07e9900b5f3996dbb16a9ed
-
SSDEEP
24576:1EP7mDWQtfyyv9RX3im5mxFcSJFynuJO7COVwEUVLK:a1QVf3fmzcSJFouJmDIK
Malware Config
Signatures
Files
-
yEkCN.exe.sample.zip.zip
Password: infected
-
yEkCN.exe.sample.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ