instalador yuzu mejorado[.]exe

Resubmissions

21/10/2023, 21:32

231021-1dnj7abc22 7

21/10/2023, 21:25

231021-z95b5sha33 8

Sharing

Copy URL

Twitter E-mail

General

Target

instalador yuzu mejorado.exe
Size

10.3MB
MD5

786e4b5a6d0e9b6f10eb975da8ba8bed
SHA1

cb09c414f4b7d54d416b90aa96848bee4db987f8
SHA256

049e03a6add9dee0de8f555c5067a98da3f71b81322d72168fa9ddc1667dcf94
SHA512

b10ebc901acda8ced8dfffcfb131b4bc3b48095fe2d51b036b67b75769fefb248055887871ac9a446b1cd47de2518c113856d1dbcf5e8b8c44f93665ba83c325
SSDEEP

98304:c7kU2RGY0HKCfjW6OMPjq+/EFXw4OlX0NgI4xS35FYUihvTNXbDu4J9HKS+ES7MP:cO1ajW6vUOU4G5FYnXXbq4Pd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
instalador yuzu mejorado.exe

Files

instalador yuzu mejorado.exe
.exe windows:6 windows x64

1c6f3509caba3366ef172cd138bddf73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

SetMenu
GetWindowLongPtrW
InvalidateRgn
SetWindowPos
SetForegroundWindow
SendInput
MapVirtualKeyW
IsProcessDPIAware
MonitorFromWindow
GetDC
RegisterTouchWindow
GetSystemMetrics
CreateWindowExW
RegisterClassExW
CreateIcon
GetClassNameW
EnumWindows
MessageBoxW
GetWindowTextW
SetWindowTextW
GetForegroundWindow
WaitForInputIdle
SendMessageA
EnumChildWindows
ShowCursor
ClipCursor
GetClipCursor
GetActiveWindow
GetWindowRect
ToUnicodeEx
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyExW
ReleaseCapture
SetCapture
DestroyIcon
SetWindowLongW
SendMessageW
SetWindowPlacement
ChangeDisplaySettingsExW
SystemParametersInfoA
GetWindowPlacement
IsWindowVisible
ShowWindow
AdjustWindowRectEx
GetMenu
RegisterWindowMessageA
MsgWaitForMultipleObjectsEx
GetUpdateRect
PostThreadMessageW
ValidateRect
GetRawInputData
RegisterRawInputDevices
PostMessageW
DestroyAcceleratorTable
GetKeyState
GetAsyncKeyState
PeekMessageW
GetCursorPos
ClientToScreen
CreateAcceleratorTableW
RedrawWindow
GetClientRect
GetWindowLongW
CloseTouchInputHandle
SetCursor
LoadCursorW
GetTouchInputInfo
MonitorFromRect
ScreenToClient
TrackMouseEvent
GetMonitorInfoW
DefWindowProcW
SetWindowLongPtrW
DestroyWindow
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
GetAncestor

ole32

RevokeDragDrop
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
RegisterDragDrop
CoCreateInstance
CoInitialize
OleInitialize

shell32

SHBrowseForFolderW
SHChangeNotify
GetCurrentProcessExplicitAppUserModelID
DragFinish
DragQueryFileW
SHGetKnownFolderPath
ShellExecuteW
SHGetPathFromIDListW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

ws2_32

getsockopt
getpeername
ioctlsocket
getsockname
WSACleanup
WSAStartup
freeaddrinfo
getaddrinfo
WSASocketW
WSAIoctl
recv
WSASend
setsockopt
WSAGetOverlappedResult
WSARecv
closesocket
bind
listen
WSAGetLastError

kernel32

OutputDebugStringW
GetFileAttributesW
LoadLibraryW
FreeLibrary
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
GetConsoleWindow
SetConsoleOutputCP
SetConsoleCP
SetConsoleMode
GetConsoleOutputCP
GetConsoleCP
GetACP
WideCharToMultiByte
MultiByteToWideChar
TzSpecificLocalTimeToSystemTime
CreateThread
CopyFileExW
RemoveDirectoryW
DeleteFileW
FindFirstFileW
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
TryEnterCriticalSection
ExitProcess
DuplicateHandle
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
CompareStringOrdinal
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSection
WriteConsoleW
ReadConsoleW
CreateDirectoryW
FindNextFileW
WriteFile
GetFullPathNameW
DeviceIoControl
GetFileInformationByHandle
CreateFileW
InitializeSListHead
IsDebuggerPresent
RtlVirtualUnwind
CreateNamedPipeW
GetCommandLineW
GetModuleFileNameW
FormatMessageW
GetEnvironmentVariableW
GetCurrentDirectoryW
TlsSetValue
TlsGetValue
GetModuleHandleA
Sleep
GetSystemInfo
SetHandleInformation
CancelIoEx
SetFileCompletionNotificationModes
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
WakeConditionVariable
SleepConditionVariableSRW
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
CreateMutexA
LoadLibraryA
WaitForSingleObjectEx
RtlCaptureContext
GetCurrentThread
GetCurrentProcess
GetProcAddress
RtlLookupFunctionEntry
GetConsoleMode
GetStdHandle
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
SetThreadStackGuarantee
AddVectoredExceptionHandler
AcquireSRWLockShared
AcquireSRWLockExclusive
SwitchToThread
ReleaseSRWLockExclusive
FindClose
CloseHandle
GetLastError
ReleaseSRWLockShared
SetLastError
GetTempPathW
SetFileAttributesW
WaitForSingleObject
GetExitCodeProcess
GetCurrentThreadId
GetModuleHandleW
lstrlenW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
GetCurrentProcessId
K32EnumProcesses
OpenProcess
ReadFile
GetFileInformationByHandleEx
SetFileInformationByHandle

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegGetValueW
SystemFunction036

bcrypt

BCryptGenRandom

comctl32

ord413
ord412
ord410

crypt32

CertCloseStore
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertDuplicateCertificateContext
CertDuplicateStore
CertOpenStore
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertFreeCertificateContext
CertDuplicateCertificateChain

dwmapi

DwmEnableBlurBehindWindow

gdi32

DeleteObject
GetDeviceCaps
CreateRectRgn

psapi

EnumProcessModulesEx
GetModuleFileNameExW

secur32

InitializeSecurityContextW
FreeContextBuffer
DecryptMessage
EncryptMessage
AcceptSecurityContext
QueryContextAttributesW
AcquireCredentialsHandleA
DeleteSecurityContext
ApplyControlToken
FreeCredentialsHandle

shlwapi

ord12

uxtheme

SetWindowTheme

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

vcruntime140

_CxxThrowException
memcmp
strchr
strstr
memmove
_purecall
__C_specific_handler
memcpy
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
wcsrchr
memset
__CxxFrameHandler3

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

floor
__setusermatherr
trunc
round

api-ms-win-crt-string-l1-1-0

strncat
strcpy
strcmp
strcat
wcsncmp
wcslen
wcscpy_s
wcscpy
tolower
wcscmp
wcscat
_wcsicmp
strncmp
_wcsdup
strlen

api-ms-win-crt-stdio-l1-1-0

fputc
_pclose
_popen
__acrt_iob_func
__stdio_common_vfprintf
fputws
_set_fmode
_wfopen
__stdio_common_vswprintf
_getcwd
fclose
fopen
__p__commode
fgets

api-ms-win-crt-filesystem-l1-1-0

remove
_wstat64
_wremove
_stat64i32
_stat64

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
free
malloc

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s

api-ms-win-crt-environment-l1-1-0

_wgetenv
getenv

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
system
exit
_set_app_type
_wassert
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_seh_filter_exe
_configure_narrow_argv

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

1c6f3509caba3366ef172cd138bddf73

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

shell32

api-ms-win-shcore-scaling-l1-1-1

ws2_32

kernel32

advapi32

bcrypt

comctl32

crypt32

dwmapi

gdi32

psapi

secur32

shlwapi

uxtheme

version

vcruntime140

vcruntime140_1

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 7.1MB - Virtual size: 7.1MB

.data Size: 4KB - Virtual size: 20KB

.pdata Size: 150KB - Virtual size: 149KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 52KB - Virtual size: 51KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 7.1MB - Virtual size: 7.1MB

.data
Size: 4KB - Virtual size: 20KB

.pdata
Size: 150KB - Virtual size: 149KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 52KB - Virtual size: 51KB