ynwcgazp.0kk.zip
- SHA256 9c9886628e45c5c4340208c3ec536491534615abaf323e20591100887d92d673
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ynwcgazp.0kk/jsvaq3ov.chh.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ynwcgazp.0kk/jsvaq3ov.chh.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target ynwcgazp.0kk.zip
- Size 1.6MB
- Sample260710-nl92yaav6n
- SHA256 9c9886628e45c5c4340208c3ec536491534615abaf323e20591100887d92d673
- MD5 3a024434a4d1b882b97d75a95c79dc9a
- SHA1 9bd75f00435476084d7037f45fddab4d4cd92891
- SHA512 baad3ce26bfee218140d238c08d5d7e5e42796c2890686513a17003d2b3dd161d5ba96e9b4067bb2944e2a6cbae0d8adb0ea43b4bb09883116db5595de58375e
- SSDEEP 49152:YcD5DdkrY4sRmRt6wt+uJstORxlBoHnWeRQrj:zD5DdkrY0KeQcRvBoHTm
- TLSH T170753372439BE1FE8C9C9BD31D4282936D2A6B2C8D7D7C41549173262CB94497ACE8EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/ynwcgazp.0kk/jsvaq3ov.chh.exe
File Explorer
-
ynwcgazp.0kk.zip.zip 1.6MB
-
ynwcgazp.0kk/jsvaq3ov.chh.exe.exe 3.0MB
ynwcgazp.0kk/jsvaq3ov.chh.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 0da281936334c16f58161db866569bcf5e768051facebe723906d7423b1be9bd
- MD5 49b6e190a5df175440e27c47584bee7f
- SHA1 2dd125ee79b91f3b5f58a0e0a3252d3f46ae1c9a
- SHA512 fad91b4ae5bb4ca330527587c60686c8563bc924a3e48d7e32fac86249781922c7783064c33e7a3eb7c022a7902a887e41e99451b8ff7505b736005a98fbfeb8
- SSDEEP 24576:Vzu6AekvEkARFGRlHy4JB7Mmk32WV46z7ZgQ1Z2IeQkSDSUbs85CQu//YYO3+Pww:VzPrO3M0lSkVMBZTtduKawWivR3pq77
- TLSH T1FDE58C43BC9119EAC8A9A33189B362527B35BC185F3233D76E90B7382E727D06D35B54
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
42:0b:e8:a6:90:ce:13:aa:80:90:d5:11:7f:d8:33:63:ce:73:4a:52
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=maannews.net,O=L1UJw9NcX,L=6tEP1I,ST=fWdz6U,C=US
Chains
Jul 8, 2026
CN=maannews.net,O=L1UJw9NcX,L=6tEP1I,ST=fWdz6U,C=US
Subject
CN=maannews.net,O=L1UJw9NcX,L=6tEP1I,ST=fWdz6U,C=US
Serial Number
7a:41:66:5d:b1:33:a0:ee
Issuer
CN=maannews.net,O=L1UJw9NcX,L=6tEP1I,ST=fWdz6U,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Jul 9, 2026 - Jul 9, 2027
Minor OS version
1
Major OS version
6
Entry point
476288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
860KB
Virtual Size
860KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
63KB
Virtual Size
357KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ