ybyrikeu[.]exe | Triage™

General

Target
ybyrikeu.exe
Size 14.6MB
Sample240903-vgpzjasfph
SHA256 83dc7a944be536ebd5cdda86381f84235930e36be9fea78504e0a997763ace58
MD5 ca17b0424f909bdc349dc3d80afe6e7f
SHA1 e158fea33819fdbb6c106c1b0a53bff446008c54
SHA512 f2d7c03b64e2ee0ca64d1b5dc57c2bd4eb44d9b77c9e4e4cce7a6672648b6676f9f78ba5bac79733aa5cdbeb0d6bfbe5064581fd3bf4d8dc5c9b73c795b67906
SSDEEP 6144:kc6OZDisWsD0Td2HJxO+m8PuG1R4WnWjrsaz:k1OZDisvwdaxO0PuG1R4CWs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ybyrikeu.exe

File Explorer

ybyrikeu.exe

.exe 14.6MB

ybyrikeu.exe

IMPHASH 526678b0f88b7214e779e54df5f3d8dd
SHA256 83dc7a944be536ebd5cdda86381f84235930e36be9fea78504e0a997763ace58
MD5 ca17b0424f909bdc349dc3d80afe6e7f
SHA1 e158fea33819fdbb6c106c1b0a53bff446008c54
SHA512 f2d7c03b64e2ee0ca64d1b5dc57c2bd4eb44d9b77c9e4e4cce7a6672648b6676f9f78ba5bac79733aa5cdbeb0d6bfbe5064581fd3bf4d8dc5c9b73c795b67906
SSDEEP 6144:kc6OZDisWsD0Td2HJxO+m8PuG1R4WnWjrsaz:k1OZDisvwdaxO0PuG1R4CWs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

27672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW CreateJobObjectW InterlockedCompareExchange UnlockFile CreateHardLinkA GetTickCount CreateNamedPipeW FindNextVolumeMountPointA SetCommState GlobalAlloc LoadLibraryW GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost VerifyVersionInfoW GetLogicalDriveStringsA SetLastError GetProcAddress GetConsoleDisplayMode GetProcessVersion InterlockedExchangeAdd CreateFileMappingW SetDefaultCommConfigW CreateEventW OpenEventA GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect GetCurrentDirectoryA WaitForDebugEvent PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW GetTempPathA EnumCalendarInfoExA LocalFree TlsFree LCMapStringW CommConfigDialogW WriteConsoleW CloseHandle FlushFileBuffers GetConsoleMode GetConsoleCP GetCurrentProcess SetEndOfFile GetConsoleAliasExesA GetNumberFormatW GetLocaleInfoA MultiByteToWideChar GetLastError HeapFree HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId HeapAlloc IsProcessorFeaturePresent HeapCreate ReadFile EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep GetStringTypeW RaiseException SetFilePointer SetStdHandle RtlUnwind HeapSize CreateFileW

user32

DrawStateA LoadMenuW CharUpperW GetSysColor GetMenuStringA GetCaretPos SetMenu

gdi32

GetCharWidthFloatA CreateDCW GetCharWidth32A GetBitmapBits

Sharing