General

  • Target

    yama.rar

  • Size

    4.6MB

  • MD5

    68239bba5955147569b66d9573f206d6

  • SHA1

    dbe97b2104e6ca0a5b651956e37dec23aac7dc7c

  • SHA256

    9a060f1a8e8db05adcc1cab5650d94cbeda091f5d11abef4ff78d399fa7913d0

  • SHA512

    674341f18d56ce863fd86ad7c9a9bac97730d3c2b6fbfe27760f6f9bef205827c33a2670ddecc1f1b3541b09ad31997188e31af4376b2e30c8c859df2173176d

  • SSDEEP

    98304:qjm/pKI0Kw+9kZvC2XHkZDNMOJyhawvAjoy6Vsg:qm/w+9kdr7w9yAjolh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • yama.rar
    .rar
  • ScriptHookRDR2.dll
    .dll windows:6 windows x64 arch:x64

    483dfe29a8a00237ca43ac1fb00471ca


    Headers

    Imports

    Exports

    Sections

  • commonx/data/ui/fontmap.xml
  • dinput8.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    94effc1b893e3249b25978949218628c


    Headers

    Imports

    Exports

    Sections

  • fontfix.asi
    .dll windows:6 windows x64 arch:x64

    56fe885809a7697d9e1f4768be5423cd


    Headers

    Imports

    Sections

  • rdr2-translator.asi
    .dll windows:6 windows x64 arch:x64

    befd9e8ef63a4ce9c0af8c0f33bae600


    Headers

    Imports

    Sections

  • rdr2-translator.xml