Static task
static1
Behavioral task
behavioral1
Sample
YuzuBrutha/YuzuBrutha.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
YuzuBrutha/YuzuBrutha.exe
Resource
win10v2004-20231222-en
General
-
Target
YuzuBrutha.rar
-
Size
1.6MB
-
MD5
c791580a1de0c8457e82bb36756cbff9
-
SHA1
2c1007495a69763a5ad2883f427366ceda5f7523
-
SHA256
6df37b1a1af44c0cdd6a28dca555234bbec656c0b9763548171b6ddee51ac260
-
SHA512
0f4ca83d223c916bbd867096f751c263cc398e9c211efc5830ceb0e1027e244bacf40b7a6138537732ef912f22f29ab91987ef36a2cad064e3c0c720594f9ebb
-
SSDEEP
49152:dylfROtwWHp+9FeCmgGfSsDS+l4H3kupgk0yUKGvgHJVUc6B7:dylQLCmgbT+l4HHpPVMgPUb7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/YuzuBrutha/YuzuBrutha.exe
Files
-
YuzuBrutha.rar.rar
-
YuzuBrutha/ABRIR COMO ADMINISTRADOR!.txt
-
YuzuBrutha/YuzuBrutha.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
^z!q3M\ Size: 1004KB - Virtual size: 1003KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
YuzuBrutha/sonidos/bienvenida.wav
-
YuzuBrutha/sonidos/hidecredits.wav
-
YuzuBrutha/sonidos/n10.wav
-
YuzuBrutha/sonidos/n6.wav
-
YuzuBrutha/sonidos/n8.wav
-
YuzuBrutha/sonidos/n9.wav
-
YuzuBrutha/sonidos/showcredits.wav