RUNDLL32_DeleteFileW
RUNDLL32_StartW
RUNDLL32_UnloadW
Overview
overview
10Static
static
3wufuc_v1.0...d4.zip
windows7-x64
1wufuc/COPYING.txt
windows7-x64
1wufuc/Donate.url
windows7-x64
6wufuc/Help...se.url
windows7-x64
1wufuc/Help...ue.url
windows7-x64
1wufuc/Rest...rv.reg
windows7-x64
10wufuc/inst...uc.bat
windows7-x64
1wufuc/unin...uc.bat
windows7-x64
1wufuc/version.txt
windows7-x64
1wufuc/wufu...ub.url
windows7-x64
1wufuc/wufuc32.dll
windows7-x64
1wufuc/wufuc64.dll
windows7-x64
1wufuc/wufu...sk.xml
windows7-x64
1Static task
static1
Behavioral task
behavioral1
Sample
wufuc_v1.0.1.201-a52637d4.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
wufuc/COPYING.txt
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
wufuc/Donate.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
wufuc/Help and Support/Latest release.url
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
wufuc/Help and Support/Report an issue.url
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
wufuc/Restore_wuauserv.reg
Resource
win7-20240215-en
Behavioral task
behavioral7
Sample
wufuc/install_wufuc.bat
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
wufuc/uninstall_wufuc.bat
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
wufuc/version.txt
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
wufuc/wufuc on GitHub.url
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
wufuc/wufuc32.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
wufuc/wufuc64.dll
Resource
win7-20240220-en
Behavioral task
behavioral13
Sample
wufuc/wufuc_ScheduledTask.xml
Resource
win7-20231129-en
Target
wufuc_v1.0.1.201-a52637d4.zip
Size
138KB
MD5
a0d640671fd50e91dd9a86843941dc43
SHA1
09e1837c55cb1932599c9f64237590bceaaf77c0
SHA256
cb3fc239e7d29e7e2425e7fcdbfa1097d15cc3e1100a4d32cf7b20a9d2cdd5f7
SHA512
360ea6bd02e6ad1b5965b469c54d2f5587060097808cbf2bd00e661aa106fae46b1219925766388b48daf7b97fdda80e0d4db0f92f61633003e6b3334e4f623f
SSDEEP
3072:w8RiXRQWko2u8dPhw3TkNIxdsU+Rr70I7VWERxaLliYwfnh:w8ABQWko2u8Dw3gemRrQI73apiYwJ
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/wufuc/wufuc32.dll |
unpack001/wufuc/wufuc64.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW
PathFindFileNameW
CreateDirectoryW
GetLastError
CreateFileW
OutputDebugStringW
InitOnceExecuteOnce
GetCurrentProcessId
CloseHandle
WriteProcessMemory
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetCurrentProcess
OpenProcess
K32GetModuleInformation
ReadProcessMemory
GetModuleFileNameW
WaitForSingleObjectEx
ReleaseMutex
OpenEventW
SetEvent
DeleteFileW
MoveFileExW
CreateEventW
CreateMutexW
VerSetConditionMask
VerifyVersionInfoW
lstrlenW
WideCharToMultiByte
WriteFile
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
DecodePointer
LocalFree
IsDebuggerPresent
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WriteConsoleW
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
MultiByteToWideChar
GetACP
GetLocalTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetCPInfo
HeapAlloc
HeapFree
GetStringTypeW
IsValidCodePage
GetOEMCP
LCMapStringW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetCommandLineW
NotifyServiceStatusChangeW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegGetValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CommandLineToArgvW
SHGetKnownFolderPath
CoTaskMemFree
NtSuspendProcess
NtResumeProcess
RUNDLL32_DeleteFileW
RUNDLL32_StartW
RUNDLL32_UnloadW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW
PathFindFileNameW
CreateDirectoryW
GetLastError
CreateFileW
OutputDebugStringW
InitOnceExecuteOnce
GetCurrentProcessId
CloseHandle
WriteProcessMemory
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetCurrentProcess
OpenProcess
K32GetModuleInformation
ReadProcessMemory
GetModuleFileNameW
WaitForSingleObjectEx
ReleaseMutex
OpenEventW
SetEvent
DeleteFileW
MoveFileExW
CreateEventW
CreateMutexW
VerSetConditionMask
VerifyVersionInfoW
lstrlenW
WideCharToMultiByte
WriteFile
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LocalFree
GetSystemTimeAsFileTime
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
WriteConsoleW
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
MultiByteToWideChar
GetACP
GetLocalTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetCPInfo
HeapAlloc
HeapFree
GetStringTypeW
IsValidCodePage
GetOEMCP
LCMapStringW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
GetCommandLineA
NotifyServiceStatusChangeW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegGetValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CommandLineToArgvW
SHGetKnownFolderPath
CoTaskMemFree
NtSuspendProcess
NtResumeProcess
RUNDLL32_DeleteFileW
RUNDLL32_StartW
RUNDLL32_UnloadW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ