Static task
static1
Behavioral task
behavioral1
Sample
yyb4.sp.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
yyb4.sp.exe
Resource
win10v2004-20230824-en
General
-
Target
yyb4.sp.exe
-
Size
35.2MB
-
MD5
35951da1edf684dd2ffd09db4bd0e66b
-
SHA1
b6e097f15407577b388f0c2ebbce7306daa895ac
-
SHA256
6410c3ff7f860b321afdec70d017a78138af85d3963d0897b91509592272338f
-
SHA512
00c731a1dc30a1078fd757d55e07472c092681e2700ebfbd2e717e2388a2feffbd2d9435e82b7d06cd3aa84f64c897027c53d115ba209fde3c4a49bcf68a30c8
-
SSDEEP
786432:GKQYt/qLDDmE52uSxZryxRzBJJ3HRYhSBfcm/uAfWq:VQYt/Iou8+HJGY4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource yyb4.sp.exe
Files
-
yyb4.sp.exe.exe windows x86
5ceec759430b802aa530832556453070
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
sendto
kernel32
GetTimeZoneInformation
user32
SetMenu
gdi32
LineTo
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetIcon
wldap32
ord29
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 5.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 26.8MB - Virtual size: 26.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE