Static task
static1
Behavioral task
behavioral1
Sample
PO YUTTR565.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PO YUTTR565.exe
Resource
win10v2004-20230220-en
General
-
Target
PO YUTTR565.exe
-
Size
551KB
-
MD5
478d232a8926f8a9167818a69ca7790b
-
SHA1
2ca3c452a07885df7aa6031b6dd427a090a41d4b
-
SHA256
c45857bf418c526b5652d2efea575e9c396fd9f46402b48cae1315a59dc13837
-
SHA512
9230fe7c05f023e7b309de862344d96e1ff8865c995ceec36c54118bc2254575e9d3d6943cd15d779a4fd6eeffc95f3f7606f623b7d3670f118a3b474f0a6b93
-
SSDEEP
12288:y1pSqeDbprMALNIt2W1y54duxtzJnU2GZlNYLTfX:+S7ZKt2MuFU2KlNGbX
Malware Config
Signatures
Files
-
PO YUTTR565.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 539KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ