YoOn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0448dd3c20a5799dc376d9ee63777810bcbf795077eb11e1219fe428b857117f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0448dd3c20a5799dc376d9ee63777810bcbf795077eb11e1219fe428b857117f.exe
Resource
win10v2004-20240226-en
General
-
Target
72e7239c705788ad3aaa2fa2e404286f.bin
-
Size
1.2MB
-
MD5
57dd4619fefe6c0e7e6a35ced6816f6f
-
SHA1
021436b32c3360a0988c543988a340f9ba85adbd
-
SHA256
46a8e933faf1f507bb1d3ea1f025feee08cca5fbbcae60fcce1025623cd340df
-
SHA512
f8630de7d8e71a9ad42c75eb7cf3e5be4d2bd0e56af675ce9acfa7f0a7a4c4d0fc286c2f59c4871640b605f6caf850ab4d99509f22e054e81547ce20c59cf4e0
-
SSDEEP
24576:I+Mn5LEg8ggSkXHt/k8hPAx7nrwaTPNYkFI39EOOCeLj7Od50XJOaAeDI+E2H:+8xXBBozzNi7e7W54waAec+E2H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0448dd3c20a5799dc376d9ee63777810bcbf795077eb11e1219fe428b857117f.exe
Files
-
72e7239c705788ad3aaa2fa2e404286f.bin.zip
Password: infected
-
0448dd3c20a5799dc376d9ee63777810bcbf795077eb11e1219fe428b857117f.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ