uplay_r1_loader64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

uplay_r1_loader64.dll
Size

135KB
MD5

73a8c593b3408af6508cb3cc1fc73192
SHA1

4935f5627f4194171faa77956835c3132554dc89
SHA256

daa5f8d869303040eccb2877e4fef9cee6953450ad4fdeb043b92b01e4b1728e
SHA512

858610c08585d2cd47a1fb4592940f8ef101751653f7d301909a1aa06acffc7a0123305c7382c435ca6fc31ae48493e9f9a9ae612bfd8e16a30930e1d89ee867
SSDEEP

3072:MUP/Nt58kmUN31fTBxjcpbxfzG/9BcBsRsf:My/Nt2kmsBcpMBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
uplay_r1_loader64.dll

Files

uplay_r1_loader64.dll
.dll windows:5 windows x64 arch:x64

a8c540e56d5acc4df431e8d190a01b6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThread
GetThreadContext
VirtualQuery
GetCurrentProcess
GetModuleHandleW
VirtualFree
InitializeCriticalSection
Sleep
LeaveCriticalSection
SetThreadPriority
FlushInstructionCache
GetProcAddress
VirtualAlloc
EnterCriticalSection
VirtualProtectEx
OpenThread
GetSystemInfo
GetThreadPriority
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
SuspendThread
ResumeThread
DisableThreadLibraryCalls
LoadLibraryA
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetFileAttributesA
CreateDirectoryA
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msvcr100

fclose
wcsstr
sprintf
??3@YAXPEAX@Z
??_U@YAPEAX_K@Z
fseek
fwrite
ftell
fread
remove
_malloc_crt
_initterm
_initterm_e
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter
__crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
fopen
malloc
free
printf
_snprintf
fflush
__iob_func
memmove
_wassert
memset
memcpy

Exports

Exports

Crack_By_3DMGAME
UPLAY_ACH_EarnAchievement
UPLAY_ACH_GetAchievementImage
UPLAY_ACH_GetAchievements
UPLAY_ACH_Write
UPLAY_AVATAR_Get
UPLAY_FRIENDS_AddToBlackList
UPLAY_FRIENDS_DisableFriendMenuItem
UPLAY_FRIENDS_EnableFriendMenuItem
UPLAY_FRIENDS_GetFriendList
UPLAY_FRIENDS_Init
UPLAY_FRIENDS_InviteToGame
UPLAY_FRIENDS_IsBlackListed
UPLAY_FRIENDS_IsFriend
UPLAY_FRIENDS_RequestFriendship
UPLAY_FRIENDS_ShowFriendSelectionUI
UPLAY_GetLastError
UPLAY_GetNextEvent
UPLAY_GetOverlappedOperationResult
UPLAY_HasOverlappedOperationCompleted
UPLAY_INSTALLER_AreChunksInstalled
UPLAY_INSTALLER_GetChunkIdsFromTag
UPLAY_INSTALLER_GetLanguageUtf8
UPLAY_INSTALLER_Init
UPLAY_INSTALLER_ReleaseChunkIdList
UPLAY_INSTALLER_UpdateInstallOrder
UPLAY_METADATA_ClearContinuousTag
UPLAY_METADATA_SetContinuousTag
UPLAY_METADATA_SetSingleEventTag
UPLAY_OVERLAY_SetShopUrl
UPLAY_OVERLAY_Show
UPLAY_OVERLAY_ShowShopUrl
UPLAY_PARTY_DisablePartyMemberMenuItem
UPLAY_PARTY_EnablePartyMemberMenuItem
UPLAY_PARTY_GetFullMemberList
UPLAY_PARTY_GetId
UPLAY_PARTY_GetInGameMemberList
UPLAY_PARTY_Init
UPLAY_PARTY_InvitePartyToGame
UPLAY_PARTY_InviteToParty
UPLAY_PARTY_IsInParty
UPLAY_PARTY_IsPartyLeader
UPLAY_PARTY_PromoteToLeader
UPLAY_PARTY_RespondToGameInvite
UPLAY_PARTY_SetGuest
UPLAY_PARTY_SetUserData
UPLAY_PARTY_ShowGameInviteOverlayUI
UPLAY_PeekNextEvent
UPLAY_Quit
UPLAY_Release
UPLAY_SAVE_Close
UPLAY_SAVE_GetSavegames
UPLAY_SAVE_Open
UPLAY_SAVE_Read
UPLAY_SAVE_Remove
UPLAY_SAVE_SetName
UPLAY_SAVE_Write
UPLAY_Startup
UPLAY_USER_ClearGameSession
UPLAY_USER_ConsumeItem
UPLAY_USER_GetAccountIdUtf8
UPLAY_USER_GetCdKeyUtf8
UPLAY_USER_GetCdKeys
UPLAY_USER_GetConsumableItems
UPLAY_USER_GetEmailUtf8
UPLAY_USER_GetNameUtf8
UPLAY_USER_GetPasswordUtf8
UPLAY_USER_GetTicketUtf8
UPLAY_USER_GetUsernameUtf8
UPLAY_USER_IsConnected
UPLAY_USER_IsInOfflineMode
UPLAY_USER_IsOwned
UPLAY_USER_ReleaseConsumeItemResult
UPLAY_USER_SetGameSession
UPLAY_Update
UPLAY_WIN_GetRewards
UPLAY_WIN_RefreshActions

Sections

.text
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.3dm0
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3dm1
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3dm2
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8c540e56d5acc4df431e8d190a01b6d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr100

Exports

Exports

Sections

.text Size: - Virtual size: 64KB

.rdata Size: - Virtual size: 19KB

.data Size: - Virtual size: 183KB

.pdata Size: - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 436B

.3dm0 Size: - Virtual size: 2KB

.3dm1 Size: - Virtual size: 48KB

.3dm2 Size: 133KB - Virtual size: 133KB

.reloc Size: 512B - Virtual size: 36B

.text
Size: - Virtual size: 64KB

.rdata
Size: - Virtual size: 19KB

.data
Size: - Virtual size: 183KB

.pdata
Size: - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.3dm0
Size: - Virtual size: 2KB

.3dm1
Size: - Virtual size: 48KB

.3dm2
Size: 133KB - Virtual size: 133KB

.reloc
Size: 512B - Virtual size: 36B