YKW1S-Mod-Tools[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YKW1S-Mod-Tools.exe
Size

881KB
MD5

e6a304982487f85b7d014c6a5ec049c2
SHA1

a3ee55be53d4d97291dc41d6b9eda29de04f94fb
SHA256

13ff72ed22993a0ed5672ea77d519fea5ee1562b8451fa379bb20268b4ed158e
SHA512

076b0ef5a5789ac8f48557c8f98ccfa78f94ff80b3da4338ebf652c3efbf70eba04d93f2fde614101d2b2e3c166ea4138fd1f18b84c9964a8ca64b8c22f7cf02
SSDEEP

12288:XP6x5pfbn0w8Z6x5pfbn0w8p6x5pfbn0w8E1kYpftn0w8:XyFn0xMFn0x8Fn0xSfn0x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YKW1S-Mod-Tools.exe

Files

YKW1S-Mod-Tools.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Morgan\source\repos\YKW1S-Mod-Tools\YKW1S-Mod-Tools\obj\Release\YKW1S-Mod-Tools.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 669KB - Virtual size: 669KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ