YomiraV65[.]exe | Triage™

Resubmissions

31/07/2025, 14:43

250731-r3xpqabk6z10

24/06/2025, 17:15

250624-vss6bswyex9

24/05/2025, 01:43

250524-b5hetadr5w9

Sharing

Copy URL Twitter E-mail

General

Target
YomiraV65.exe
Size 46.7MB
Sample250524-b5hetadr5w
SHA256 55a418f8562684607ee0acd745595e297ab7e586d0a5d3f8328643b29c72dfa2
MD5 9157330816399f1a430386c82deba69c
SHA1 850618fc552e4ccde5e6bdf71b05a63478ea4950
SHA512 579ba0ca745900b6c2db5d0b257c57f347fc91d552638247e2872e64e35ed9ff3adf3df55fe6f089f24ff3eb12a48729e3144a644724ca889073bf93a39726d0
SSDEEP 786432:3Y4BILC885/PJstn3cs+asFuLO9Kc4+0jifX+pDP:3Y6IL9n3ct+G4B/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YomiraV65.exe

File Explorer

YomiraV65.exe

.exe 46.7MB

YomiraV65.exe

IMPHASH 7d8ca9debb6e175a17bbfed3bb3f7cf6
SHA256 55a418f8562684607ee0acd745595e297ab7e586d0a5d3f8328643b29c72dfa2
MD5 9157330816399f1a430386c82deba69c
SHA1 850618fc552e4ccde5e6bdf71b05a63478ea4950
SHA512 579ba0ca745900b6c2db5d0b257c57f347fc91d552638247e2872e64e35ed9ff3adf3df55fe6f089f24ff3eb12a48729e3144a644724ca889073bf93a39726d0
SSDEEP 786432:3Y4BILC885/PJstn3cs+asFuLO9Kc4+0jifX+pDP:3Y6IL9n3ct+G4B/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comctl32

DefSubclassProc InitCommonControlsEx RemoveWindowSubclass SetWindowSubclass

gdi32

CreateFontW CreateSolidBrush DeleteObject SelectObject

kernel32

ActivateActCtx AddVectoredExceptionHandler CloseHandle CreateActCtxW CreateFileMappingA CreateFileW CreateThread CreateToolhelp32Snapshot DeleteFileW DuplicateHandle FormatMessageW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentThread GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetTempFileNameW GetTempPathW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete LoadLibraryA LoadLibraryW MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFileInformationByHandle SetLastError SetThreadStackGuarantee SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile WaitForSingleObject WriteConsoleW DeleteCriticalSection EnterCriticalSection GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter RaiseException RtlAddFunctionTable RtlUnwindEx TerminateProcess UnhandledExceptionFilter VirtualProtect VirtualQuery __C_specific_handler

ole32

CoInitialize

user32

AdjustWindowRectEx CreateWindowExW DefWindowProcW DeleteMenu DestroyMenu DestroyWindow DispatchMessageW DrawTextW EnumChildWindows FillRect GetAncestor GetClientRect GetDC GetMenuItemCount GetMenuItemID GetMessageW GetMonitorInfoW GetParent GetWindowLongPtrW GetWindowRect GetWindowTextLengthW GetWindowTextW InvalidateRect IsDialogMessageW IsWindow LoadCursorW MonitorFromWindow PostMessageW RegisterClassExW ReleaseDC ScreenToClient SendMessageW SetFocus SetParent SetWindowLongPtrW SetWindowPos ShowWindow TranslateMessage UpdateWindow

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

msvcrt

__dllonexit __getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _fmode _fpreset _initterm _lock _onexit _unlock abort atexit calloc exit fprintf free fwrite malloc signal strncmp vfprintf

ntdll

NtWriteFile RtlNtStatusToDosError memcmp memcpy memmove memset strlen

Name

.text

Size

659KB

Virtual Size

659KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

528B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

45.7MB

Virtual Size

45.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

YomiraV65.exe

comctl32

gdi32

kernel32

ole32

user32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

msvcrt

ntdll

generic