yubx-ui (2).rar
- SHA256 3f48a2c28dac7d1fab0de4a62277b74b40162f565d7916448a2481757948c09a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yubx-ui.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
yubx-ui.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
20 signatures
150 seconds
General
- Target yubx-ui (2).rar
- Size 26.4MB
- Sample261020-s8r7vscc22
- SHA256 3f48a2c28dac7d1fab0de4a62277b74b40162f565d7916448a2481757948c09a
- MD5 10623ee2715b864a75019e48af811e14
- SHA1 fcb9ce733e8376699dbff9086f9e23c3ad8578eb
- SHA512 88736fced3e5673646cd3daccd84e64d484c5336f88823b0a57ee0246a249aa330ac11def27ae53eac97e1ddaa316d94c29edc05d97fb53b63274e30ce7e6014
- SSDEEP 393216:U//6jla45xKiXMnsfH7BE/LKWEnqjKkG/95CLR+sDuDwrP6Wxr67bYVHlDoAse+5:g1uKicnsjBGesGkG89uDYCWZxfD3y67o
- TLSH T1F5573366781F0D6063677101995EB50FB400AB1BD8429EB0D7A31FA2FEFA53DF1047A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/yubx-ui.exe
File Explorer
-
yubx-ui (2).rar.rar 26.4MB
-
yubx-ui.exe.exe 30.6MB
yubx-ui.exe
- IMPHASH 58fa98823414a80e0f509ee4814e2ea3
- SHA256 a06323f0aadf233b74be6054a431547edcce0b4dc2eacd86501df7933cfe02ce
- MD5 414c4b7bd0c36cc5fa6a5c05c6310d22
- SHA1 d62705024801a531481584f398c3746d4028a2eb
- SHA512 8ae35cd902dd57c9b2ea0f53f8b2741b5faf3fbecc218d4a167d4ff98d91c0a8751394dc7c09230ad900d1e72cfebd0adafad9b3defa41c064f87ea827d263ff
- SSDEEP 786432:Vh1o3CRpAQtqzlMIIxjtOEqrC0FgdDXyI/LF:T1o3qpAP+II9wEq9+xXV
- TLSH T1206723EB21F5629CC4C2D972E68961FAF4CD34B98DB9851B7FC609032A30C59CCE5876
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
45719210
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetLogicalDrives
SetUnhandledExceptionFilter
bcryptprimitives
ProcessPrng
advapi32
RegSetValueExW
EventRegister
ntdll
NtOpenFile
user32
TranslateAcceleratorW
ole32
CoInitializeEx
shell32
SHGetKnownFolderPath
CommandLineToArgvW
gdi32
CombineRgn
api-ms-win-core-synch-l1-2-0
WaitOnAddress
dwmapi
DwmEnableBlurBehindWindow
comctl32
TaskDialogIndirect
shlwapi
SHCreateMemStream
oleaut32
SetErrorInfo
crypt32
CertOpenStore
ws2_32
WSAGetLastError
secur32
EncryptMessage
bcrypt
BCryptGenRandom
pdh
PdhCloseQuery
powrprof
CallNtPowerInformation
psapi
GetModuleFileNameExW
api-ms-win-crt-math-l1-1-0
roundf
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-convert-l1-1-0
wcstol
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
Virtual Size
15.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
12.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
863KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.~Y4
Size
Virtual Size
10.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.}o&
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.w8S
Size
30.6MB
Virtual Size
30.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
188B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ