gamesense yuki fix.zip
- SHA256 67766e6d415c54c84e3d680e165afa187786c01fad183279bf6024b9da1af5c2
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skeet fix/skeet.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
skeet fix/skeet.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
skeet fix/steam.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
skeet fix/steam.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target gamesense yuki fix.zip
- Size 3.9MB
- Sample261024-mn5dssht4v
- SHA256 67766e6d415c54c84e3d680e165afa187786c01fad183279bf6024b9da1af5c2
- MD5 e5df26621a43045902970f15b9c449f2
- SHA1 c9d0657050231902e5829b26f255fa848f917eb1
- SHA512 407355a77f358344ec05c729cd50b5f183d9df106d0aafb6bd13b7c6072d829dc625339630f7901a8a4fb696b3986a00e8c0eb6dcecffab63cceb44286f4fa48
- SSDEEP 98304:3iBgSlYrhgnO9C2PACGbduy9T9gD9nvL9ehhzLpH:i7M53GnPgDRKhn9
- TLSH T11D1633E78B4B18CD83AD517911F9918CB44DDF7A8CAA986CBB022353714540C9FBAC7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/skeet fix/skeet.dll unpack001/skeet fix/steam.exe
File Explorer
-
gamesense yuki fix.zip.zip 3.9MB
-
lua/!kizaru.lua.js 10KB
-
lua/Dormant_aimbot.lua7KB
-
lua/Scoreboard equipment.lua.js 32KB
-
lua/aesthetic_skeet.lua.bat 789KB
-
lua/allow_unsafe_dt_v2.lua1KB
-
lua/dumped_Helper_V3_Grenades,_Movement,_One_ways_Legit_+_HvH_1.lua.bat 175KB
-
lua/jumpscout.lua460B
-
setts for lua/aesthetic setts.txt73KB
-
setts for lua/lunni location.txt844KB
-
skeet fix/skeet.dll.dll 13.4MB
-
skeet fix/steam.exe.exe 23KB
lua/!kizaru.lua
- SHA256 4160610b29f5d997b8b8a86fcb54a614c174119249d3bc0a86b8f9bebe12c500
- MD5 4d827d0cc857f4a8ea5526f09a4395ce
- SHA1 3806297256ade9a2f77e1a72dbf63f17654138bb
- SHA512 c146be860fd4005e31e1716537f0b5eb145e13235bdb8732e30b820b058cfda6237594955c9b08a0a975648c258b8326d4e4b559d1e79f590f5a663d7718199f
- SSDEEP 192:anwAI60KyXym9JYDabakDDCFHQ45jnokqCUpyFImnE2wU:alvpmvGFHwkFFI3E
- TLSH T13032CCE73543216155F7FA95CD07051AFBB401A33038722ABE9D4AD02F3A94E93E5BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/Dormant_aimbot.lua
- SHA256 7d2fea13c039dc60bee51800b0160db647f6ac6cf6c74e2d7856869d33ee1fc0
- MD5 d009fb6aa8df31ba0cb50e63ffbd5367
- SHA1 a12b1ad98810e2af2a6bce798a26d8a10048e7f3
- SHA512 194d6859c5d7e8f58dce788502e597016bc7d68925be83ccfecf783c837db771076f8a71436c195a3bb044414eb36080d03ec9994b0086be1dd81ae99b98e949
- SSDEEP 192:vfDwD6BvEdoDwTYUKFO4uBLq6jOtg+QP29ROTIFsFFW5gI3iccGq2wi2aY:nDwD65gawTX0O4uBLXiQPYROTIyFFQiN
- TLSH T105F17567F5CB40318CD263C5D93215A0F6BAE2712D2D3702F895B1BC410CAAC93E9ABD
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/Scoreboard equipment.lua
- SHA256 88204ab58cf8224a379c746dc26388a4754e65e51a47833119c4c342d4c14f25
- MD5 14f978976d130201ca9138dcc51a96c2
- SHA1 7ff337174d80fe07ae37530f772d351042186df4
- SHA512 370cc17a21def7eb8570588f389e0e4be98321ac329c390da333a0c6bf98e97c40fabae7a0a1d36d5498cc842bf8fcb5c0e173ef5e570167e54da8eb0949a543
- SSDEEP 768:OHaEBnJlLLXYJGdoxn5AuShiOLaZaorcOdCiXcQ5fiJq/BCUawtu0m3wfzoYMLj8:YBaZFdosZ
- TLSH T13BE2B3E5B54F659A84E872D4E57B0A45F03DF0B126391344F285B4FD1088AACA3FEA7C
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/aesthetic_skeet.lua
- SHA256 2b4e32abdcf80bc45dbfc78ac4e5a086c0feb6ccefcaf454a6fde12ad3d2f33c
- MD5 7890333c31c326ec2812a23ff6b3afad
- SHA1 dca6affa6a868e052ed1304bd0221336b80cbae4
- SHA512 25f71754eaf577f887c78c9d153c2cf19f3e34e3cd6bc807b41435c8f5ac54d2d9fddba47f4b2e3d59ff2e93631205aecd966f4eace96d0b7b87301f80f7e026
- SSDEEP 6144:uCow88IV96m1U9Nk021vhaSXnii4TzKYdRP7vshltV+iYDy/m+E180X:Row88IV9EcjZi1KYdRPqXI
- TLSH T18E05931A7143012484B3E79ADC0F0519E76216DB566C152FBEFC8AE83FF129D91E27AC
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/allow_unsafe_dt_v2.lua
- SHA256 9907792cbc75419bd6484def7ce2c343add115dbc34c051280e9d001677d583d
- MD5 43c85558df50d109a628d77590d35fdf
- SHA1 54480f915466382da07dc414c8f556bfa4e975f3
- SHA512 b1c0342afdd249fa135d141be7ee2182b5bcd4b1b36869de8e566b317ac5dba820f5428c87758a150e38d857f15bb67ce82b70f5b200ff9e34204174e8fb6f22
- TLSH T1CA31F116125382B288F2EF89EC031B04F77142A3681A6157FE2D899D0F34B5C02D6A6E
- MD5 SHA1 SHA512 TLSH
lua/dumped_Helper_V3_Grenades,_Movement,_One_ways_Legit_+_HvH_1.lua
- SHA256 abd2f25e8548f46c5c27c752a0bce7154f3f39c89fcb9bed2ceeb958cedf1a76
- MD5 69a0fe65f047d300a357e9af9dc86065
- SHA1 177bf04245b46c8a0f503163b29ec025fb0dde09
- SHA512 275d0b494049698a81629e4980a0efb9cb43a0a794a611baf94519790a160402a3e089d7125ddd3aeb2d83d3cae8aeb1b3df8c99db94a2c9b7890de836a5ae4c
- SSDEEP 3072:RGAckD8nJ+JvwqxZepCICLu9O0cZJz9DvekGfJJxJVgeZuhBnS:RGAc9no5wqipCYO029GfJTvgeZuhBnS
- TLSH T15D04FE9A724F01518C61348ACC3FFE87E89DCC7270EC5611FB936A34668663F55E28B9
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/jumpscout.lua
- SHA256 46a97ad1b33d1f8d4b3fa2c4e898de3645d1c960089286d48c3d1b9eda82313f
- MD5 6b8470f136c446850bab3fa59fe8995a
- SHA1 ffb070d77b5c02042abba0a1bd1231a51fe8e5e7
- SHA512 c715f4545675b8268a6cddbea341da6bbf3415cfff494f816a15f678e3a56b532b4987322ba2930cae50e8902ab04def8574ac662c64c1b73d759212fb43ccf7
- TLSH T1F7F0DC270607621328E2FDD0AC675110F0360212B17A69863AEC2B180F3CB8C03A2CFA
- MD5 SHA1 SHA512 TLSH
setts for lua/aesthetic setts.txt
- SHA256 f7a1042c2870f0d3772bffbe90b4638bab29eaa9c7e40b4a269054812033fd98
- MD5 859ba86342b83566e1080aa28d7c9e8c
- SHA1 b298f3cf96201d94a1dcd9b3cadb916c1e5b5c30
- SHA512 dd22041387075cd2700a07fdd1211b7b07043fe1d3951cfb83f923a17f75bdadc5428cfd68b95679e02c13f32647b3f2628780922c80cff1c3c867929de3a2e3
- SSDEEP 768:USH9zGNE303VGg5FuzhO7ErisJXAvr4ErHlw8IqfrG8qv/XXXxyMdbq4fg28UHpF:U0Su/IFdI0zmCU1b
- TLSH T12773434CF0960528D022439AE51F077549B72EDE5F6C58AF4AF4DEF835E12AC99C32E8
- MD5 SHA1 SHA512 SSDEEP TLSH
setts for lua/lunni location.txt
- SHA256 00ff18e9244e249ab66dcf3c115bf4c4d350c4d49ed87f782b300a176f65839b
- MD5 1945900869f56748a45ac4f25034f145
- SHA1 5bd529591148b28c9e948ec87b4c5a4147f4b257
- SHA512 f40002d73e4597a667845515f1345612242b063dbde93b43e2558fb7e2dfc797981fb77e679b7704426dd4a2c8df6a73336b9c629fb9766151ba243301a4af7f
- SSDEEP 1536:r/cFFlGNDW5w0RUt3doPWa9SSM3tanSubMn0OFjhzTD0s6u08NJLE0ClMbPxTUNL:r/XKYUwtIIW
- TLSH T1FB051876CE5C0D6A59BDF3ACA9AE5606E132039B24812C0F76BE558C0F77632594EF0C
- MD5 SHA1 SHA512 SSDEEP TLSH
skeet fix/skeet.dll
- IMPHASH 0566ce6e945c04eb19ba6c2be86e918b
- SHA256 670955c376e3db74eaea2dbe9d8b6e75f571de001b7855f7e5f4aa7c34644aa4
- MD5 6c352c3be1a68d147d6422807a2083e6
- SHA1 3a4cf494e1bf2aae7a288bfb3a41369f7815c9e0
- SHA512 969fa42fa1844f1b19c6609ea20a22919536712cf15ecbeee7df76f8bf02fec23d6dfce79a1830deb2d2a4ac426e26a8a6645e132b7a28142e3d02e1895540c9
- SSDEEP 98304:9nfWCC4zAW+90dwJzAdP17lCk4+pvlFx3icl/d2gCGberIIQsY2e+w3dqip:JdMWqj6u4vzQcl/36PY2ezE
- TLSH T121E6F633EB095C26E07DA2FDA45E2D09F4969327448449C7B23D814FAFB358B294E47E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1792823
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\sakenzo\Desktop\ВАЖНОЕ\code stuff\cpp projects\skeet\Release\skeet.pdb
kernel32
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualAlloc
LoadLibraryA
AddVectoredExceptionHandler
SetThreadContext
ResumeThread
GetSystemTimeAsFileTime
GetCurrentProcessId
SetEnvironmentVariableW
GetProcAddress
GetCurrentProcess
AcquireSRWLockExclusive
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
CreateThread
CloseHandle
DisableThreadLibraryCalls
GetModuleHandleA
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
ReleaseSRWLockExclusive
user32
MessageBoxA
MessageBoxW
FindWindowA
advapi32
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
msvcp140
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_detach
?_Xout_of_range@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
_Cnd_do_broadcast_at_thread_exit
?_Xbad_function_call@std@@YAXXZ
?_Incref@facet@locale@std@@UAEXXZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
_Mbrtowc
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Id_cnt@id@locale@std@@0HA
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?good@ios_base@std@@QBE_NXZ
?uncaught_exceptions@std@@YAHXZ
?width@ios_base@std@@QAE_J_J@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
vcruntime140
memcpy
_purecall
__std_type_info_destroy_list
__std_exception_destroy
memmove
_except_handler4_common
__CxxFrameHandler3
_CxxThrowException
memset
__std_exception_copy
__current_exception_context
__current_exception
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
calloc
realloc
free
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
terminate
_initterm_e
_initterm
_cexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_beginthreadex
_crt_atexit
api-ms-win-crt-convert-l1-1-0
strtod
strtoul
strtoll
strtoull
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-math-l1-1-0
_fdclass
_dclass
_fdsign
_dsign
_ldclass
_ldsign
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
203KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
537KB
Virtual Size
538KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10.9MB
Virtual Size
10.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=259, version=35207,
count=10, id=260, version=35207,
count=25, id=261, version=35207,
count=4, id=257, version=35207,
count=7, id=257, version=33140,
count=135, id=1, productName=Unmarked objects,
count=4, id=265, version=35214,
count=1, id=255, version=35214,
count=1, id=151,
count=1, id=258, version=35214,
skeet fix/steam.exe
- IMPHASH 3fedf31deb15677c819ae9ae09f114aa
- SHA256 1ae987340ef795c62eb708abfe6bb492fa09cc2d0b2f194e6191ffcba39a9558
- MD5 c56fcf137d8be6fe66578b99eb9f0f75
- SHA1 cc43483f3eba13ef3863ca93badbb02d03766862
- SHA512 de8255bff4891372b1d947d750910b35bcae89e8fed668c096c4d27d7209f3b31b8aa929c9336f93b420cc72a62fdceb82ffad83d358c0402eab5d3b5bcddf0f
- SSDEEP 384:+nn6c1ndPca0WpGgLUvFg8mxhtd6JRucSrq8Zuk4trG3CsvUGA7v+GN3MaA:e5pD8mHrNQkqrG3Nvm7Bd
- TLSH T17DB22923BA5786B6D65246B10839EFEE82BFB5305F6126D7F7814D2E09705D0EE3201E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
13210
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Legias\Desktop\skeet-master (1)\skeet-master\Release\steam.pdb
kernel32
WriteProcessMemory
SetConsoleTitleA
WaitForSingleObject
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
GetProcAddress
VirtualAllocEx
CreateRemoteThread
GetCurrentDirectoryW
GetLastError
GetModuleHandleW
LocalFree
FormatMessageA
GetLocaleInfoEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
msvcp140
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?good@ios_base@std@@QBE_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
vcruntime140
__CxxFrameHandler3
memmove
__std_exception_destroy
__std_exception_copy
__std_terminate
_CxxThrowException
__current_exception
__current_exception_context
memset
_except_handler4_common
memcpy
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
terminate
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_register_onexit_function
__p___argv
_controlfp_s
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
_set_app_type
_seh_filter_exe
__p___argc
_c_exit
_cexit
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=259, version=35207,
count=12, id=260, version=35207,
count=26, id=261, version=35207,
count=4, id=257, version=35207,
count=3, id=257, version=33145,
count=124, id=1, productName=Unmarked objects,
count=1, id=265, version=35227,
count=1, id=255, version=35227,
count=1, id=258, version=35227,