F:\GitHub\Origin DLC Unlocker\v2\EA DLC Unlocker v2 source v2.1.2.0\Release\version.pdb
Static task
static1
General
-
Target
version.dll
-
Size
188KB
-
MD5
2ef99a682256f6b9820b876a9eb2950a
-
SHA1
fcd5b03210b3e0dbddd2146e66a245079dc843ac
-
SHA256
cf784476719a93e3fb8457a2d4c4580b691b6d04592b9a4467acf563f30d2b83
-
SHA512
757f1e48c3087a2bc31aa6f2573c01a21f460029090fedb03794aa63f5d49c5e6ce853bf8a57e450e211ddf83dc9eee32f8958e99e36945c5578aff5a8111e36
-
SSDEEP
3072:6znwT/WEMkaq3i/6+svlWTRlYOcWtAlxKm1aCk99X6tCq4OIhUujzlmZtcbdB2eo:WwT9qqMZsId+OcWOPa7dVqJujzGAwuCP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource version.dll
Files
-
version.dll.dll windows:6 windows x86 arch:x86
0261d3d34f74f2def59a2653f6f25c82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLastError
CreateThread
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
Sleep
GetCurrentThread
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetEnvironmentVariableW
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCommandLineW
CreateDirectoryW
DecodePointer
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
CreateFileW
SetStdHandle
GetStringTypeW
GetFileSizeEx
GetProcessHeap
SetLastError
GetCurrentProcess
VirtualProtect
VirtualQuery
LoadLibraryExA
LoadLibraryExW
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ReadFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
CloseHandle
SetFilePointerEx
GetConsoleMode
ReadConsoleW
FlushFileBuffers
WriteFile
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
user32
MessageBoxW
wininet
HttpQueryInfoW
InternetOpenA
InternetOpenUrlA
InternetGetLastResponseInfoA
InternetReadFile
InternetCloseHandle
HttpQueryInfoA
Exports
Exports
GetFileInformationByHandle
GetFileVersionInfoA
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ