The yugamase exe File Malware Analysis

Technical Analysis

File Name	yugamase.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.215.174
Database Version	2025-04-28 18:00:18 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	b1da5ee979c7d4a953bece1a87e1e542
SHA1	c70726385a46cbf1ad5940d62fcab05c2a470493
SHA256	96d48b7cf3a7069de565b2f78cdc134d08d42dff4bacd1f687021abd21c935a9
SHA512	63d3341a9ee23d564999ac64687e78eedd80a98d4055451a39b83c9d529c67453266bda4977cb2b3bd6200268ef54e3efe717566651346854e3bd7c7daf08968
ImpHash	ddcce5f855ca8a76afc7773851088501

PE Analysis

Basic Information

▼

Icon	Hash: 61699eaa7290baa3c29189cdb74ba668 Fuzzy: a14c8d3cebaf61c7413a58ac2429eb48 dHash: 3b391313793b232f
Image Base	`0x140000000`
Entry Point	`0x14025a5dc`
Compilation Time	2024-04-13 19:09:32
Checksum	0x004fd90d (Actual: 0x004fd90d)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`C:\Users\mikage\Documents\MyDevEnv.emote\Projects\Win32\Artemis\x64\Release\Artemis.vs2022.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	13 libraries
Exports	0 functions
Resources	12 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	2,835,248 bytes	2,835,456 bytes	6.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`27DA8DEFBE94E41956F3CD43B85A28AD`
`.rdata`	`0x002b6000`	1,683,966 bytes	1,683,968 bytes	4.99 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`40BAF8E4B3C8F5174DA1D450B8F4EEED`
`.data`	`0x00452000`	167,808 bytes	151,040 bytes	4.61 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E4291F51213E08491FE8C20D0ED6FBFE`
`.pdata`	`0x0047b000`	113,400 bytes	113,664 bytes	6.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`BA434D7FE669196C3943C3B95A4306E9`
`.text`	`0x00497000`	1,056 bytes	1,536 bytes	1.41 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0C99C50F3F12F887F64B455359EB23E2`
`_RDATA`	`0x00498000`	500 bytes	512 bytes	4.21 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`DC42BE1E5A0258EEFD5CDFA7BE0A3359`
`.rsrc`	`0x00499000`	410,529 bytes	410,624 bytes	6.45 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`4C35323B59EF155AFD0ED3ED17FEDEAA`

Resource Analysis

▼

Total Resources: 12 (409,862 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	10	409,135 bytes	99.8%
RT_GROUP_ICON	1	146 bytes	0%
RT_MANIFEST	1	581 bytes	0.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The yugamase.exe File Analysis