YandereSimLauncher[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YandereSimLauncher.zip
Size

702KB
MD5

93ec2619b5cb26d9a233af45d1d3c052
SHA1

e465a5d01bbfdf9438ef62c968a902250cafe9f9
SHA256

6d877c0e8f9164a45c68cc7702ba196984571eb948041bb3d683b4c1eeaa1bbc
SHA512

96825677cad938c773c6d6772dcca821dcff53a3c9986619b2ec215e38f7931735acc31c7e2682868c86a9ec4bec8d394d4f15c319d5508395737d6ba3505880
SSDEEP

12288:F0hPQVr6GmMvElhg5T85Whw+zWv+fZcMjTvzFs5WSAc5BgAbHW/5rcLYuOrARR3Z:KhPi2LcMGTsl+zZyMjTJsvAcUAbm6Eb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/YandereSimLauncher.exe

Files

YandereSimLauncher.zip
.zip
YandereSimLauncher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\BTSync\Projects\Visual Studio\YandereLauncher\YandereSimLauncher\obj\Debug\YandereSimLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ