Static task
static1
Behavioral task
behavioral1
Sample
YandereSimLauncher.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
YandereSimLauncher.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
README.txt
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
README.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
YandereSimulatorLauncher.exe
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
YandereSimulatorLauncher.exe
Resource
win10v2004-20230703-en
General
-
Target
YandereSimLauncher.zip
-
Size
4.1MB
-
MD5
e2d16c99f98d49dce10d667b04cf83d2
-
SHA1
7e3249e567061b30e5dd635c84443464f59fefda
-
SHA256
9c4a5ebfc8c05ab1c09ca887ee26079f9482299234026320ad187470aa94cd89
-
SHA512
e8a872e09992e683e49fd5c7686825370821bf747bb4c28d85a04a30b22bac6ba8ec47230e19a34e619b116cc4501b84f08e30da260f62b3d312fee01b9b4d39
-
SSDEEP
98304:0LMrke2qFYG13FOoxP9ztTaY5RR51HwHbA/sIFERilDuduOL:5Qe2zO3FO4ZZEusqTud
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/YandereSimulatorLauncher.exe
Files
-
YandereSimLauncher.zip.7z
Password: infected
-
YandereSimLauncher.zip.zip
Password: infected
-
README.txt
-
YandereSimulatorLauncher.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ