yuanbao[.]exe | Triage™

General

Target
yuanbao.exe
Size 21.8MB
Sample260720-2k8dlsh121
SHA256 bca78e472cdf94c16fd67cdf2894d7286c17b370007878b988b9a9f9705f99d5
MD5 c1972777ad8a8b590091efd3a4dde67b
SHA1 33513fec5b369256cab40980e022ff3368089c0e
SHA512 254426c36b39731ff4c07c86e30b23434d438024d30b0f8bbed0f19b1f7225644eee2dfe427068d1b1aeeb2ef88aab32ab74369dc799db5e0a37f73321048b95
SSDEEP 393216:siGrZag/6KiuKk9k9B/yyq03lvGwODuycrJSFuRMYp/27bWPRz9Ftjh1:dGrZl/UBky9B/yy1VLgpop2ihtjh1
TLSH
T1F437338430E1D4BEC11029B953EDD9B3AE35EDE4CB0795FB33C4FD0B61B09986A6125A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
yuanbao.exe

SHA256 bca78e472cdf94c16fd67cdf2894d7286c17b370007878b988b9a9f9705f99d5
MD5 c1972777ad8a8b590091efd3a4dde67b
SHA1 33513fec5b369256cab40980e022ff3368089c0e
SHA512 254426c36b39731ff4c07c86e30b23434d438024d30b0f8bbed0f19b1f7225644eee2dfe427068d1b1aeeb2ef88aab32ab74369dc799db5e0a37f73321048b95
SSDEEP 393216:siGrZag/6KiuKk9k9B/yyq03lvGwODuycrJSFuRMYp/27bWPRz9Ftjh1:dGrZl/UBky9B/yy1VLgpop2ihtjh1
TLSH
T1F437338430E1D4BEC11029B953EDD9B3AE35EDE4CB0795FB33C4FD0B61B09986A6125A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

76434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths