home

yang hack.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s6213.chomikuj.pl and multiple other hosts.
MD5:
7198691ac097bbd076480c7678d7097a

SHA-1:
bba415069a2624b0d4b790578d15cde1ca05eea9

SHA-256:
524bc7ecef77645deb63b3e45b05659188024e132ac2aac3c9e144280aa28460

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 8:49:59 AM UTC  (today)

File size:
586.5 KB (600,576 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\yang hack.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:/yZc+QWtvOf6RxQWFs+M4KcdaGa3+Ya3aFo:aO+BvQ6RxQWbhIGw43a

Entry address:
0x78544

Entry point:
55, 8B, EC, 83, C4, F0, B8, D4, 81, 47, 00, E8, F8, D9, F8, FF, A1, 18, B2, 47, 00, 8B, 00, E8, D4, AF, FD, FF, A1, 18, B2, 47, 00, 8B, 00, BA, A4, 85, 47, 00, E8, D3, AB, FD, FF, 8B, 0D, 5C, B3, 47, 00, A1, 18, B2, 47, 00, 8B, 00, 8B, 15, 3C, 7D, 47, 00, E8, C3, AF, FD, FF, A1, 18, B2, 47, 00, 8B, 00, E8, 37, B0, FD, FF, E8, FA, B7, F8, FF, 00, 00, FF, FF, FF, FF, 0E, 00, 00, 00, 4D, 65, 74, 69, 6E, 32, 59, 61, 6E, 67, 48, 61, 63, 6B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
477.5 KB (488,960 bytes)

The file yang hack.exe has been seen being distributed by the following 2 URLs.

http://s6213.chomikuj.pl/File.aspx?e=EtT2lYVPOQ9gs4CQ_oeT8oanOVgpL2QU3g52S0jdH_8HbJrVBFEbHb3ogxF_MV9nau4ZUhOGTjRZ6vKTz0SznWvLicyB-xYDD3mue_LqLtQyxNJ04F558zCwrEXe_KQsMLdNl3p9ttVUOJv1rIppyw&pv=2

http://s10238.chomikuj.pl/File.aspx?e=EtT2lYVPOQ9gs4CQ_oeT8oanOVgpL2QU3g52S0jdH_-JLY1owTOvI96xy4qA1_7Egw-FTLfL6-1r-OG0IeWAWLEkCQtpMB2bOj6ywMvPi6ZNkvP3I1iENfPZiPFd9Pd6Fc9PT9pTjdiNkbIvm0naxQ&pv=2

Scan yang hack.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.