Static task
static1
Behavioral task
behavioral1
Sample
yuuwaku.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
yuuwaku.exe
Resource
win10v2004-20240802-en
General
-
Target
yuuwaku.exe
-
Size
1.2MB
-
MD5
0510f70f4b5727255529fadcf0d29a5e
-
SHA1
bcdc948f2820f7e9a0ea33cf74c5d14579553aab
-
SHA256
64c6110f0fdba1ee86bd51e3c083b2bcb4cca4149db580ed6cecf6b4f450ee3c
-
SHA512
650d5acce5eaf6843a81205627d612785bd0251e1395d31821e6dc6c0d97815a62b932ade6ff791f7032d80deb6b2a4d23fd53f04da98b2f2cd76f1a4c07cf61
-
SSDEEP
24576:rKn17qhFdU1pj4QyR0A/mYWHdF1EoqqJXwTbqixNA9VPbTOfSi:nmIo3RaQXwTuixN8VjTOfL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource yuuwaku.exe
Files
-
yuuwaku.exe.exe windows:4 windows x86 arch:x86
debaffbdd9fd3ecd23aec3d1fe067431
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmAssociateContext
ImmGetDefaultIMEWnd
kernel32
LocalAlloc
CreateEventA
GetPrivateProfileStringA
CreateFileMappingA
GetLastError
MapViewOfFile
CloseHandle
UnmapViewOfFile
OpenProcess
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
WaitForSingleObject
Sleep
FreeLibrary
LoadLibraryA
GetFileSize
InterlockedDecrement
ExitProcess
LeaveCriticalSection
GetLocaleInfoA
GetACP
LocalLock
LocalUnlock
LocalFlags
LocalFree
InterlockedIncrement
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
lstrlenA
lstrcpyA
FindNextFileA
FindFirstFileA
FindClose
FindResourceA
LoadResource
LockResource
lstrcatA
GlobalMemoryStatus
GetLocalTime
DeleteFileA
RemoveDirectoryA
GetExitCodeThread
ResumeThread
TerminateThread
HeapFree
HeapAlloc
GetProcessHeap
GlobalAlloc
GlobalLock
GlobalUnlock
WritePrivateProfileStringA
LoadLibraryExA
GetSystemInfo
WaitForMultipleObjects
PulseEvent
ResetEvent
SetEvent
GetVersionExA
GetProcAddress
CreateDirectoryA
WriteFile
ReadFile
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
GetLogicalDrives
GetDriveTypeA
IsDBCSLeadByte
OutputDebugStringA
GetSystemDefaultLCID
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
lstrcmpA
GetThreadLocale
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
RaiseException
user32
InsertMenuItemA
CreatePopupMenu
DeleteMenu
OpenClipboard
EmptyClipboard
CloseClipboard
PostThreadMessageA
PeekMessageA
GetFocus
RegisterClipboardFormatA
SetClipboardData
GetClipboardData
DialogBoxParamA
GetAncestor
WindowFromPoint
ReleaseCapture
ShowCursor
SetCapture
GetCapture
GetSysColor
DrawTextA
CallWindowProcA
WaitMessage
EnumDisplayMonitors
GetMenuItemCount
DrawMenuBar
EnumWindows
GetWindowThreadProcessId
SystemParametersInfoA
GetDesktopWindow
SetWindowLongA
GetActiveWindow
ClientToScreen
GetDoubleClickTime
TrackPopupMenu
GetSystemMenu
GetMenuItemInfoA
EnableMenuItem
GetClientRect
AdjustWindowRectEx
EnumDisplaySettingsA
GetWindowPlacement
IsZoomed
GetParent
SetWindowPos
FindWindowA
LoadImageA
ChangeDisplaySettingsExA
GetClassNameA
IsWindowVisible
CreateMenu
MoveWindow
IsIconic
GetWindowRect
FindWindowExA
EndDialog
IsClipboardFormatAvailable
CreateDialogParamA
SendDlgItemMessageA
IsWindowEnabled
GetDlgItem
EnableWindow
SetDlgItemInt
SetDlgItemTextA
GetSystemMetrics
SetForegroundWindow
MessageBoxA
SetTimer
KillTimer
GetAsyncKeyState
CharPrevA
GetCursorPos
ScreenToClient
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
SetFocus
MonitorFromRect
GetMonitorInfoA
GetDlgItemTextA
SetCaretBlinkTime
OffsetRect
GetWindowDC
RegisterClassA
RegisterClassExA
HideCaret
ShowCaret
GetCaretPos
GetUpdateRect
BeginPaint
EndPaint
LoadIconA
DefWindowProcA
SetCursor
LoadCursorA
LoadCursorFromFileA
DestroyCursor
FillRect
GetDC
ReleaseDC
UnionRect
IntersectRect
wvsprintfA
CharNextA
AppendMenuA
CheckMenuItem
AllowSetForegroundWindow
WINNLSEnableIME
DestroyMenu
GetSubMenu
GetWindowLongA
CreateCaret
SetCaretPos
GetCaretBlinkTime
GetWindow
DestroyCaret
SetWindowTextA
PostQuitMessage
PostMessageA
LoadMenuA
SendMessageA
DestroyWindow
GetWindowTextA
InvalidateRect
UpdateWindow
ShowWindow
IsWindow
SetRectEmpty
gdi32
RealizePalette
BitBlt
StretchBlt
SetStretchBltMode
GdiFlush
SetROP2
SetBkMode
CreateCompatibleDC
SelectObject
Polyline
DeleteObject
CreateDIBSection
CreateFontIndirectA
GetStockObject
DeleteDC
CreateICA
GetDeviceCaps
AddFontMemResourceEx
GetSystemPaletteEntries
StretchDIBits
SelectPalette
CreatePen
SetTextColor
EnableEUDC
GetOutlineTextMetricsA
CreatePalette
MoveToEx
LineTo
CreateSolidBrush
CreateRectRgn
GetClipBox
GetDCOrgEx
GetTextExtentExPointA
TextOutA
GetTextExtentPoint32A
GetGlyphOutlineA
SetDIBColorTable
shell32
ShellExecuteExA
DragQueryPoint
DragFinish
DragQueryFileA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHAppBarMessage
ShellExecuteA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
msvcp80
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
msvcr80
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
memset
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??2@YAPAXI@Z
_except_handler4_common
__CxxFrameHandler3
??3@YAXPAX@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
fread
fprintf
__iob_func
sprintf
strncpy
sscanf
getenv
_CIlog
memmove_s
vsprintf
_beginthreadex
_purecall
free
_CIcos
_CItan
_CIpow
malloc
_setjmp3
longjmp
strncpy_s
floor
_CIsin
_aligned_malloc
_aligned_free
_CIsqrt
_mbsstr
_ultoa
_ltoa
_mbsspnp
_mbccpy
_mbspbrk
_mbschr
_ismbbtrail
_mbsupr
_mbslwr
strtoul
_mbsnbcpy
atoi
isdigit
memcpy
??_V@YAXPAX@Z
_CIatan
winmm
midiOutLongMsg
midiOutShortMsg
timeGetTime
timeKillEvent
waveOutGetNumDevs
midiOutClose
midiOutUnprepareHeader
midiOutPrepareHeader
mciSendCommandA
timeSetEvent
midiOutOpen
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
waveOutGetErrorTextA
waveOutOpen
waveOutClose
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutGetDevCapsA
midiOutGetDevCapsA
midiOutReset
comctl32
InitCommonControlsEx
ImageList_Destroy
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
libogg
ogg_page_eos
ogg_sync_init
ogg_sync_buffer
ogg_sync_wrote
ogg_stream_packetout
ogg_stream_clear
ogg_sync_clear
ogg_sync_pageout
ogg_page_serialno
ogg_stream_init
ogg_stream_pagein
libvorbis
vorbis_comment_init
vorbis_info_init
vorbis_synthesis_headerin
vorbis_synthesis_init
vorbis_block_init
vorbis_block_clear
vorbis_dsp_clear
vorbis_info_clear
vorbis_synthesis_read
vorbis_synthesis_pcmout
vorbis_synthesis_blockin
vorbis_synthesis
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
msvfw32
MCIWndCreateA
Sections
.text Size: 776KB - Virtual size: 775KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ