Static task
static1
Behavioral task
behavioral1
Sample
Yim.Launchpad.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Yim.Launchpad.exe
Resource
win10v2004-20230220-en
General
-
Target
Yim.Launchpad.exe
-
Size
326KB
-
MD5
04664dc26f6c3d38b9bcc30bb5499425
-
SHA1
f0b42be55bdd5f5c0e7ce0ee3f733a2e5e0c978b
-
SHA256
177d59213401a20ce1b5a9ea171d8aa50e5302a33368af2212ddde32ae86dc11
-
SHA512
d7bca9987b07f904baef86df7c97980fc5c9b3267f070f1c3bf90081e8d1985e9fada969edc59ad180b87ebeb856926a5f9ea7d52722f329a11b970ca17b221e
-
SSDEEP
3072:FK1FZ3gS/umMXfkpE/kxHIfSvr66Jq+8Kj/umMXfkpE/kxHIISvrP6Jq+u4Q:Pmefn4ofQW6JeBmefn4oIQT6JU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Yim.Launchpad.exe
Files
-
Yim.Launchpad.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ