Yuki[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Yuki.dll
Size

828KB
MD5

eab4333758df8af326965c73934d387f
SHA1

d4cc9920c2602f44760574d8a65dd6ef47c6005f
SHA256

15a588066ed4de5f7bf68b7eca54444887745f3230ee24a5dfdd213309aa4e2a
SHA512

aee0b36328ae09be27ddd8661596f1ecca6b674dbf78cf6331066d5d26c8d5f5d4ca9c23e2c21b435e0b352780cb5f2b50d1344deeded638856168ef06127df8
SSDEEP

12288:LlITW5+0uRzDRqxGzu2XaTUoG9BgZwuSt1hIMSczrnuofJg4SJhSRdumgXbr:LlivRzDRu2KwB0PStLIYzrnuB4SES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Yuki.dll

Files

Yuki.dll
.dll windows:6 windows x64 arch:x64

735ba413cbd58d62611aeed38edd3783

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\vicei\Downloads\yuki cs2 internal\yuki\x64\Release\Yuki.pdb

Imports

kernel32

GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
AllocConsole
SetEndOfFile
WriteConsoleW
HeapReAlloc
HeapSize
CreateFileW
SetStdHandle
GetStringTypeW
GetProcessHeap
GlobalLock
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GlobalFree
GlobalAlloc
VirtualQuery
GetCurrentThread
GetModuleHandleA
GetCurrentThreadId
VirtualProtect
ResumeThread
FlushInstructionCache
GetCurrentProcess
SetThreadContext
GetThreadContext
VirtualFree
GetLastError
SuspendThread
VirtualAlloc
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapAlloc
HeapFree
LCMapStringW
FlushFileBuffers
WriteFile
GetConsoleOutputCP

user32

LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
IsChild
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
ReleaseCapture
GetKeyState
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
CallWindowProcA
SetWindowLongPtrA
mouse_event
GetAsyncKeyState
SendInput
SetCursorPos

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

d3dcompiler_47

D3DCompile

Sections

.text
Size: 421KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

735ba413cbd58d62611aeed38edd3783

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

imm32

d3dcompiler_47

Sections

.text Size: 421KB - Virtual size: 420KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 267KB - Virtual size: 273KB

.pdata Size: 19KB - Virtual size: 18KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 421KB - Virtual size: 420KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 267KB - Virtual size: 273KB

.pdata
Size: 19KB - Virtual size: 18KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 3KB - Virtual size: 2KB