Static task
static1
Behavioral task
behavioral1
Sample
Yully Spoofer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Yully Spoofer.exe
Resource
win10v2004-20230220-en
General
-
Target
Yully Spoofer.exe
-
Size
404KB
-
MD5
cbe46de2863cc2c5dfbd8e0a67768558
-
SHA1
b2fd24f3d73c1e76ca28b693b58e926dcc8c4e21
-
SHA256
333cbdcc5ff977d20596fb805e599e1cc20fe233be7b4f83ca6590bb39fe0a97
-
SHA512
9f53540cc015df47d5fce3ef267db9c3b9d85e761785bcab7b7f04dca1f7a033b2ff7fcd48d3623111a054adb513e104033d5edbc7767bce7038185228455693
-
SSDEEP
6144:i5vcoYE4QRFRlhjcc+q6vvbva8W2vfwXQMX909CPlNCEenaT5xBFn66TaJc0gbwq:UvV3bxA1oXTe9qlNZenmxPLK/vzrU7
Malware Config
Signatures
Files
-
Yully Spoofer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 398KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ