Static task
static1
Behavioral task
behavioral1
Sample
yandere-school-setup-v0-91.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
yandere-school-setup-v0-91.exe
Resource
win10v2004-20230703-en
General
-
Target
yandere-school-setup-v0-91.exe
-
Size
120.9MB
-
MD5
2cea040f438e96bfee4ccdea71d6c2b1
-
SHA1
01188584b06cb912fe6689339f6058b8343bca37
-
SHA256
1003e469af891d8c057e8de9410d44f94253973ce3ebf03b1c72a16eac0ed62a
-
SHA512
2dce137ef965950312abcae149fe07f714c0848fe02e0d650b38fb0efb6b8e69563bd61fd5e64dec49149ee827d3d241e60088fab0f28d2cfbe44c9df43d2023
-
SSDEEP
3145728:PsM2dT3P8mJew2UJJzbZxZd1bmUI31tHb3+5bHYjtyL4:32BP8mt/T34UI3nHb3+5bHMq4
Malware Config
Signatures
Files
-
yandere-school-setup-v0-91.exe.exe windows x86
Code Sign
3e:96:18:05:39:57:10:87:47:07:99:c1:0b:c7:f5:aeCertificate
IssuerCN=YandereSchool CANot Before09/03/2017, 15:16Not After31/12/2039, 23:59SubjectCN=YandereSchool CA16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before31/12/2015, 00:00Not After09/07/2019, 18:40SubjectCN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
b0:d0:2a:0b:18:5f:fe:88:de:b9:37:d7:76:9d:2e:18:a8:03:f0:7eSigner
Actual PE Digestb0:d0:2a:0b:18:5f:fe:88:de:b9:37:d7:76:9d:2e:18:a8:03:f0:7eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ