General

  • Target

    YURI.exe

  • Size

    11.5MB

  • MD5

    6bc7c5b5fe2be2b3eaa783c524974821

  • SHA1

    e033b8eede742508c8998ca67c77d299b825afaa

  • SHA256

    ba587c38408f3399c9f59ad7475fa9a516221f35c995d364e789eaf22e049901

  • SHA512

    62c9fb4d120f7fc076f67ad16b2f8066a654b0c1ecd9e00ca0ed1c09c393ddd800522497838f83ee414aeb7ade1e8570f8e895e2ed7661bf9dc2f551bffb0309

  • SSDEEP

    196608:gjxeMqit6HWshpGKbnv8ZVZ0dQmR8dA6l/8Qnf2ODjMnGydScSEPmMrbOzWobyk2:kzqiMHcKDqVmdQJlVF3MnG3tOmMrbeZO

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • YURI.exe
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections

  • YURI.pyc