ymnu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16e9bc6afb3e487749ffed54bace65bb58dd5257c66a0baef767d371eda437ce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16e9bc6afb3e487749ffed54bace65bb58dd5257c66a0baef767d371eda437ce.exe
Resource
win10v2004-20240319-en
General
-
Target
16e9bc6afb3e487749ffed54bace65bb58dd5257c66a0baef767d371eda437ce.exe
-
Size
884KB
-
MD5
cb60f9802b22337e3182ff3045e848fa
-
SHA1
b3d29c2524c103e786e2a73c3dfdbe37b8e0ee28
-
SHA256
16e9bc6afb3e487749ffed54bace65bb58dd5257c66a0baef767d371eda437ce
-
SHA512
bb7a9e679caa06f904eff2b4f08006d2cbeae03dfaa9e7a6b90e667040bedee607c8d147a16b56d5ecae99a11e0e9f6fdafc436f48867e12022198020f749be0
-
SSDEEP
24576:6OKGhEYdA9mPUiGZHQZcrOuP115OI7BN1:dKGhEYdAMfhSd155B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 16e9bc6afb3e487749ffed54bace65bb58dd5257c66a0baef767d371eda437ce.exe
Files
-
16e9bc6afb3e487749ffed54bace65bb58dd5257c66a0baef767d371eda437ce.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 882KB - Virtual size: 881KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ