YK520I00
Static task
static1
Behavioral task
behavioral1
Sample
95039ba8cb467ac34406c9e66e3bfaa891118054ef00362e2d634ae01e8bc0b1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95039ba8cb467ac34406c9e66e3bfaa891118054ef00362e2d634ae01e8bc0b1.dll
Resource
win10v2004-20240426-en
General
-
Target
95039ba8cb467ac34406c9e66e3bfaa891118054ef00362e2d634ae01e8bc0b1.exe
-
Size
168KB
-
MD5
c270e220b2e662e524cfa7fa82552f30
-
SHA1
83d06c8f6edfc8abeeaf25918e5a6dffbe7a2b28
-
SHA256
95039ba8cb467ac34406c9e66e3bfaa891118054ef00362e2d634ae01e8bc0b1
-
SHA512
ade0a15b6df82fe30f381079b6d871e5e0145aef25483f556ca7e753d6a56383236894c9231c89c20d8a0c0acd37e38af13858732e134b2c52dcb2708394d9cf
-
SSDEEP
1536:5tPFKl8j9WMOx5IlDYl58J5q5EOVBwBwFzGHuBjQw7p:DtA8j9WWJ05BB8gzvB8w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95039ba8cb467ac34406c9e66e3bfaa891118054ef00362e2d634ae01e8bc0b1.exe
Files
-
95039ba8cb467ac34406c9e66e3bfaa891118054ef00362e2d634ae01e8bc0b1.exe.dll windows:4 windows x86 arch:x86
d210a4831d4522cfe91d92899705f052
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
f3biprct
ord24
ord3
ord14
ord54
ord67
ord82
ord1
f3binuc
ord21
ord22
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ