UCheck
UCleanup
USendSample
USolve
Static task
static1
1 signatures
General
-
Target
UProtect.dll.sc
-
Size
628KB
-
MD5
e55678325e5dc32cff86cb5c0d5db83a
-
SHA1
4fba755f4548881180fde2fe029541110cc9c403
-
SHA256
7bff005756d8a5214a1fd19266c52ebb4f95ae98f945cd20daf8cbe85bdb610d
-
SHA512
60f9636c48081cf2e50822edc4ec8a16427137a38b18f72ab8fecbe948e943135d62f76239a72c256f6ecc56deb1cb421991295a822357ab9225ec31e23af625
-
SSDEEP
12288:+vcu5Jkc/nzZs3MZbaTeWajpIPe6jsQEgigy:+vcuztVs5Oue6j6g9y
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource UProtect.dll.sc
Files
-
UProtect.dll.sc.dll windows x86
8e2513935b53caa127df37ed6ba7c2fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW
SHGetValueA
SHGetValueW
StrRChrW
kernel32
GlobalFindAtomW
FreeResource
GetStringTypeExW
lstrcmpiW
LockFile
UnlockFile
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
HeapReAlloc
ExitProcess
ExitThread
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
LoadLibraryA
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetVersionExA
GlobalFlags
GetModuleHandleA
GetCurrentDirectoryW
GetPrivateProfileIntW
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GetAtomNameW
GlobalGetAtomNameW
CompareStringW
InterlockedIncrement
SetErrorMode
DeleteCriticalSection
LocalReAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GlobalAddAtomW
SuspendThread
ResumeThread
SetThreadPriority
GlobalDeleteAtom
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
FindResourceW
LoadResource
LockResource
SizeofResource
MulDiv
DeviceIoControl
OutputDebugStringW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
LocalAlloc
LocalFree
ResetEvent
OpenEventW
OpenEventA
CreateEventA
GetFileSize
FindNextFileA
FindFirstFileA
SetFilePointer
SetFileTime
GetFileTime
SetEndOfFile
MoveFileExW
MoveFileExA
MoveFileW
MoveFileA
CreateFileA
CreateDirectoryW
CreateDirectoryA
RemoveDirectoryW
RemoveDirectoryA
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
DeleteFileW
DeleteFileA
CopyFileW
CopyFileA
WriteFile
ReadFile
GetLastError
GetVersionExW
CreateThread
TlsFree
GetSystemDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentProcessId
CreateFileW
SetNamedPipeHandleState
TlsGetValue
TlsSetValue
SetEvent
CreateEventW
TlsAlloc
GetExitCodeThread
FlushFileBuffers
DisconnectNamedPipe
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetCurrentThreadId
LoadLibraryW
GetProcAddress
FreeLibrary
GetExitCodeProcess
CreateProcessW
CreateProcessA
WaitForSingleObject
lstrlenW
CloseHandle
FindFirstFileW
Sleep
FindNextFileW
FindClose
GetStdHandle
user32
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
KillTimer
SetTimer
SetRect
UnpackDDElParam
ReuseDDElParam
LoadMenuW
GetMenuBarInfo
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
GetDialogBaseUnits
InvalidateRect
SetRectEmpty
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
ScrollWindowEx
ShowWindow
MoveWindow
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetDesktopWindow
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
SendMessageW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
DeleteMenu
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
UpdateWindow
gdi32
PolylineTo
GetBkColor
GetTextMetricsW
CreateCompatibleBitmap
StretchDIBits
CreateFontW
GetCharWidthW
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32W
CreateFontIndirectW
GetDCOrgEx
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectW
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetTextColor
GetDeviceCaps
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
CopyMetaFileW
CreateDCW
CreateBitmap
SaveDC
RestoreDC
PolyBezierTo
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
EnumServicesStatusA
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegDeleteValueA
RegCreateKeyW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegSetValueW
RegDeleteValueW
OpenSCManagerW
OpenSCManagerA
RegEnumValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyW
RegDeleteKeyA
EnumServicesStatusW
RegSetValueExW
RegCreateKeyExA
shell32
DragQueryFileW
DragFinish
SHGetFileInfoW
ExtractIconW
ole32
StringFromGUID2
CoDisconnectObject
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CLSIDFromString
CoUninitialize
CoInitializeEx
CreateBindCtx
oleaut32
SafeArrayPtrOfIndex
VariantInit
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
SafeArrayRedim
VariantChangeType
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
VarCyFromStr
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VarDateFromStr
SysReAllocStringLen
crypt32
CertGetNameStringW
CertCloseStore
CryptMsgGetParam
CryptQueryObject
CryptMsgClose
CertFindCertificateInStore
CertFreeCertificateContext
Exports
Exports
Sections
.text Size: 470KB - Virtual size: 469KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ