Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
8Static
static
1XB1ULK 1.1/Memory.dll
windows7-x64
1XB1ULK 1.1/Memory.dll
windows10-2004-x64
1XB1ULK 1.1...on.dll
windows7-x64
1XB1ULK 1.1...on.dll
windows10-2004-x64
1XB1ULK 1.1...er.exe
windows7-x64
1XB1ULK 1.1...er.exe
windows10-2004-x64
1XB1ULK 1.1...er.exe
windows7-x64
1XB1ULK 1.1...er.exe
windows10-2004-x64
8Static task
static1
Behavioral task
behavioral1
Sample
XB1ULK 1.1/Memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
XB1ULK 1.1/Memory.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
XB1ULK 1.1/Newtonsoft.Json.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
XB1ULK 1.1/Newtonsoft.Json.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral5
Sample
XB1ULK 1.1/Xbox Achievement Unlocker.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
XB1ULK 1.1/Xbox Achievement Unlocker.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
XB1ULK 1.1/Xbox Achievement Unlocker.exe
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
XB1ULK 1.1/Xbox Achievement Unlocker.exe
Resource
win10v2004-20230220-en
Target
XB1UNL_1.1.zip
Size
357KB
MD5
ca554a9d2a740fcb94562bc36ff22115
SHA1
937ae3f29b8fd89eb8e4fa10b5873a6bcec71309
SHA256
db9686427f60a39aac3fda1fac3550c7afcad9608a465210887fec7dd1ff6941
SHA512
fd8d4e5fff683b76a4462a3908e30207fe16e7d2fcf038339585eda4d92d09c63fe3501491c9f1458f921b530052d4220f3f91d9f8e6fafd6c42c5ffe6c186f2
SSDEEP
6144:1ZKQe/tVVVP+GP/HT6rN87tfKb+K14FH9jlegi5iM8LeUmD8RAp7kOIp9blWYMn:TUVVPZDQNwE169jRiKLmgRA5kOIvblWT
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
MessageBoxW
ShellExecuteW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_errno
_register_onexit_function
_initialize_onexit_table
_exit
abort
__p___argc
__p___wargv
_c_exit
terminate
_register_thread_local_exe_atexit_callback
exit
fputwc
__p__commode
_set_fmode
fflush
__stdio_common_vfwprintf
fputws
__acrt_iob_func
__stdio_common_vswprintf
_wfopen
__stdio_common_vsprintf_s
setvbuf
free
calloc
_set_new_mode
_callnewh
malloc
wcsncmp
_wcsdup
strcspn
strcpy_s
wcsnlen
wcstoul
_wtoi
localeconv
___mb_cur_max_func
_lock_locales
___lc_codepage_func
___lc_locale_name_func
__pctype_func
setlocale
_configthreadlocale
_unlock_locales
frexp
__setusermatherr
_time64
_gmtime64
wcsftime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ