yuzu_install[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

yuzu_install.exe
Size

6.6MB
MD5

823e098cef1ca97b56ff3f9c0afef60d
SHA1

f099126307a76bc2de3b199580ab597b02e11b2e
SHA256

578b95a62ecf3e1a3ea77d8329e87ba72a1b3516d0e5adb8d3f3d1eb44a7941e
SHA512

601ff90ad115e2bf21e2c9c0b9180ce5a508eb9f78d9f25688ccf1f2f7645488e3e69ce2887dd178cb100f7978f52d3757043193d788989543346e2042102ae4
SSDEEP

49152:ctOpMnOxEDi5qiaPB8k4/hMsPp7e9gtvH9fCs3/Va9sn/yM6SVGAjKtwQts5CMPB:JvRtvhTCw5CMPjHSm+W1X6MP

Score

N/A

Malware Config

Signatures

Files

yuzu_install.exe
.exe windows x64

740777fd33fa740f96a5fd1b94eadbf3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSAIoctl
WSASocketW
getaddrinfo
WSASend
WSAStartup
WSACleanup
getsockname
ioctlsocket
getpeername
setsockopt
WSAGetOverlappedResult
bind
WSARecv
getsockopt
closesocket
listen
WSAGetLastError
recv
freeaddrinfo

kernel32

CloseHandle
RemoveDirectoryW
GetLastError
GetProcessHeap
HeapFree
SwitchToThread
FindClose
lstrlenW
GetCurrentProcessId
K32EnumProcesses
OpenProcess
HeapAlloc
FindFirstFileW
FindNextFileW
AddVectoredExceptionHandler
HeapReAlloc
IsDebuggerPresent
GetConsoleMode
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetProcAddress
GetCurrentProcess
ReleaseMutex
GetCurrentThread
RtlCaptureContext
ReadFile
ReadConsoleW
LeaveCriticalSection
DeleteCriticalSection
GetFileInformationByHandleEx
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetStdHandle
SetHandleInformation
GetSystemInfo
Sleep
GetModuleHandleA
QueryPerformanceCounter
WaitForSingleObject
TlsGetValue
TlsSetValue
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
SetLastError
GetEnvironmentVariableW
WriteFile
WriteConsoleW
GetCurrentDirectoryW
TlsAlloc
FormatMessageW
GetModuleFileNameW
GetCommandLineW
CreateFileW
GetFileInformationByHandle
DeviceIoControl
CreateDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateProcessW
CreateNamedPipeW
DuplicateHandle
ExitProcess
QueryPerformanceFrequency
DeleteFileW
CopyFileExW
CreateThread
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetSystemTimeAsFileTime
RtlVirtualUnwind
GetModuleFileNameA
GlobalAlloc
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InitializeSListHead
GetCurrentThreadId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
CancelIoEx

advapi32

RegGetValueW
RegSetValueExA
RegCreateKeyA
RegCloseKey
SystemFunction036

crypt32

CertOpenStore
CertFreeCertificateContext
CertDuplicateCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCloseStore
CertDuplicateCertificateChain
CertDuplicateStore
CertVerifyCertificateChainPolicy

ole32

OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree

psapi

GetModuleFileNameExW
EnumProcessModulesEx

secur32

FreeContextBuffer
QueryContextAttributesW
AcquireCredentialsHandleA
DeleteSecurityContext
FreeCredentialsHandle
EncryptMessage
DecryptMessage
InitializeSecurityContextW
AcceptSecurityContext
ApplyControlToken

shell32

ShellExecuteW
SHGetKnownFolderPath
SHChangeNotify

user32

SetWindowLongPtrA
GetWindowLongPtrA
SetWindowTextA
AdjustWindowRect
MessageBoxA
GetDesktopWindow
GetClientRect
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
SetFocus
UpdateWindow

oleaut32

SysAllocString
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayDestroy
SafeArrayCreate
SysFreeString

vcruntime140

__C_specific_handler
_CxxThrowException
memcmp
memmove
memset
__CxxFrameHandler3
memcpy
__current_exception
__current_exception_context

api-ms-win-crt-string-l1-1-0

_wcsdup
strlen
wcscpy_s
strncmp
strncpy
wcscmp

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
malloc
free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
_set_app_type
_wassert
_configure_narrow_argv
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
terminate
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf
_set_fmode
__p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

740777fd33fa740f96a5fd1b94eadbf3

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

advapi32

crypt32

ole32

psapi

secur32

shell32

user32

oleaut32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 3.6MB - Virtual size: 3.6MB

.data Size: 4KB - Virtual size: 6KB

.pdata Size: 130KB - Virtual size: 129KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 33KB - Virtual size: 32KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 3.6MB - Virtual size: 3.6MB

.data
Size: 4KB - Virtual size: 6KB

.pdata
Size: 130KB - Virtual size: 129KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 33KB - Virtual size: 32KB