General

  • Target

    yuki-loader.exe

  • Size

    9.3MB

  • MD5

    678e7a79f9dd04c0451dc1a36fe4f044

  • SHA1

    eb16042b424d52bcb1b26038e029d1b8364047e6

  • SHA256

    2d1ecc458d2ca9438e3d231c943666ffb0a064a7efdc633e6437363dd99bfb9e

  • SHA512

    8744792db8d38efcb5d947cab6f35d62006394df85d73069875cfcdf7fa4f0655095c70b3dd2e3c9e90543e3d06d905397f5d2cb928e0b18c60cc2f314b5e422

  • SSDEEP

    196608:9rDK5xdvlKEz467yMTJQJMTh0d5z2L0fla6flkZrKPBqYxeX5f:6HG6WMi/52LOlzflaKPJk

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • yuki-loader.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1

    9d7671f5c63c0273a8fb0dfdd3bf724f


    Headers

    Imports

    Exports

    Sections