ymbk[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ymbk.exe
Size

81.2MB
MD5

f7b9faf98763a7dfb8fa312291abe39c
SHA1

3c8a7f2885d5465dac86ee001c22375e9fb88145
SHA256

c48585aaad4288f5f119da99355579c4fa61721f13e6f96c13b1b38cf672dbae
SHA512

52442968379d52c42a10762f478e3fcb8ba23947469e078e2930fa77f3b05ed3c610b77ef31e18688a6f792d67567827d9ed5f3cf6da9c3c32170b650a16395d
SSDEEP

1572864:zHRP3dtcv9AxsLAsRG+hnW08MPMedhpTwC6qnIVMJoiO/Z3MzgnWGBJ8mpzNLzmZ:zx1+v9L0EpWKPMILwC6qnwkovh3znWG2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ymbk.exe

Files

ymbk.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 81.1MB - Virtual size: 81.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ