Overview

overview

8

Static

static

1

yuki.exe

windows7-x64

7

yuki.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    yuki.exe
  • Size 58.6MB
  • Sample241111-wlqx3askav
  • SHA256 1c0d63ed602d3c5b4c7fea32e801ab1b2610f7e9d50c3ccb7ca9550810ea2e0a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • yuki.exe
    .exe 58.6MB
  • loader-o.pyc
    5.1MB

yuki.exe

  • IMPHASH 72c4e339b7af8ab1ed2eb3821c98713a
  • SHA256 1c0d63ed602d3c5b4c7fea32e801ab1b2610f7e9d50c3ccb7ca9550810ea2e0a
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx64arch:x64

PE Signature issue

Digest
53:e8:c2:53:ff:b4:12:33:c4:8f:ab:fb:a5:84:b9:90:c6:64:96:a4:64:c5:1d:7c:2e:34:38:c7:68:a0:67:18
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains

Nov 11, 2024

Minor OS version
0
Major OS version
6
Entry point
52656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths