D:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb
Overview
overview
3Static
static
3yeeeat-mai...ox.dll
windows7-x64
1yeeeat-mai...ox.dll
windows10-2004-x64
1yeeeat-mai...eak.js
windows7-x64
1yeeeat-mai...eak.js
windows10-2004-x64
1yeeeat-mai...PI.dll
windows7-x64
1yeeeat-mai...PI.dll
windows10-2004-x64
1yeeeat-mai...at.exe
windows7-x64
1yeeeat-mai...at.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
yeeeat-main/Yeeeat/FastColoredTextBox.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
yeeeat-main/Yeeeat/FastColoredTextBox.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
yeeeat-main/Yeeeat/Scripts/Jailbreak.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
yeeeat-main/Yeeeat/Scripts/Jailbreak.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
yeeeat-main/Yeeeat/WeAreDevs_API.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
yeeeat-main/Yeeeat/WeAreDevs_API.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
yeeeat-main/Yeeeat/Yeeeat.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
yeeeat-main/Yeeeat/Yeeeat.exe
Resource
win10v2004-20240412-en
General
-
Target
yeeeat-main.zip
-
Size
926KB
-
MD5
6e0e5e3fb455dfaf34ffbddca8c17f1a
-
SHA1
4fac6c96122bb002ef9527d1c5e2ef78a3ccef05
-
SHA256
3be5a2a26226878fda735c8cf87a7eb35fe27af577e0e26c906d70a4fbb2e5fd
-
SHA512
36e823308fc22ab91747e6329d0209452b0b37363b3df87c60a36f024bc1750eda2f56f6175ae2188061ada305a54b22b7e68219ea16f0f5b73c3707da8e37f2
-
SSDEEP
24576:mQKpXkyk3xL97/JY6JnDKh/S/kBI8q8IGcyzvK+cTY1Q/Q3KN:mQKpXkyk3x5lY6VDKScu8IyjK+ccxG
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/yeeeat-main/Yeeeat/FastColoredTextBox.dll unpack001/yeeeat-main/Yeeeat/WeAreDevs_API.dll unpack001/yeeeat-main/Yeeeat/Yeeeat.exe
Files
-
yeeeat-main.zip.zip
-
yeeeat-main/README.md
-
yeeeat-main/Yeeeat/FastColoredTextBox.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
yeeeat-main/Yeeeat/Scripts/Arsenal.txt
-
yeeeat-main/Yeeeat/Scripts/Jailbreak.txt.js
-
yeeeat-main/Yeeeat/WeAreDevs_API.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Users\burne\Desktop\Exploit-API-Legacy\WeAreDevs_API\obj\Release\WeAreDevs_API.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
yeeeat-main/Yeeeat/Yeeeat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Arthur\source\repos\Yeeeat\Yeeeat\obj\Debug\Yeeeat.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 398KB - Virtual size: 397KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ