UnityPlayer[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

UnityPlayer.dll
Size

27.7MB
MD5

1bb73e7cd623d72ae93245baed669e66
SHA1

f039a113be2e92fc2bd8794f6edb0688f5768fef
SHA256

24096eb4995461708603ea9bed6b29e800f762af912322cbbbc3bda863c87292
SHA512

91fb4c24aa0196f18aabee3cfa9a14fa7fec1a5050a371b4ff0837dac268ec8ed10dbfbe81b0bc676603d3036b5db9c60ce01c9aeeaa10df8dba908ac6dc7e6a
SSDEEP

393216:U7+mgcHsP/5+G03eG37JMCExEP5DYC1WvOll2MXnRVM32BtNp3vIMOK6ULRkAsJV:UWZChn3XtnVUxVd

Score

1^/10

Malware Config

Signatures

Files

UnityPlayer.dll
.dll windows:6 windows x64 arch:x64

321d9c9a4d2018622f1a6dad0b44e04e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30/08/2022, 00:00

Not After

29/08/2023, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

14/07/2021, 00:00

Not After

18/07/2024, 23:59

Subject

CN=Unity Technologies ApS,OU=Developer Services,O=Unity Technologies ApS,L=København,C=DK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8d:6c:7f:05:82:78:0a:f1:17:0c:1e:36:dd:8b:eb:63:5e:70:22:eb
Signer

Actual PE Digest

8d:6c:7f:05:82:78:0a:f1:17:0c:1e:36:dd:8b:eb:63:5e:70:22:eb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\buildslave\unity\build\artifacts\UnityPlayer\Win64_VS2019_nondev_m_r\UnityPlayer_Win64_player_mono_x64.pdb

Imports

kernel32

DeleteFileW
GetFileAttributesW
GetTempFileNameW
GlobalAlloc
GlobalUnlock
GlobalLock
GetSystemTime
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SuspendThread
ResumeThread
LocalFree
CopyFileW
MoveFileExW
ReplaceFileW
SystemTimeToFileTime
Thread32First
Thread32Next
CreateMutexA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesA
DebugBreak
SetUnhandledExceptionFilter
GetErrorMode
GetThreadContext
ReadProcessMemory
GetModuleFileNameA
LocalAlloc
GetOverlappedResult
CancelIo
ResetEvent
FormatMessageA
GetWindowsDirectoryW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateIoCompletionPort
GetQueuedCompletionStatus
DeleteCriticalSection
AttachConsole
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
ReleaseSemaphore
GetLocalTime
GetTimeZoneInformation
GetFileSizeEx
IsDebuggerPresent
CreateSemaphoreExW
TlsAlloc
TlsFree
GetNativeSystemInfo
VirtualQuery
GetFileSize
GetStdHandle
GetEnvironmentVariableW
VerSetConditionMask
SetThreadAffinityMask
SetConsoleCtrlHandler
GetStartupInfoA
TerminateProcess
GetCurrentProcess
WaitForSingleObject
SetLastError
SetErrorMode
GetModuleHandleW
SetThreadPriority
GetCurrentThreadId
CreateThread
SwitchToThread
GetModuleHandleA
CreateToolhelp32Snapshot
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetTimeFormatW
GetDateFormatW
GetProcessHeap
HeapAlloc
HeapFree
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
GetConsoleCP
ExitProcess
HeapQueryInformation
HeapSize
HeapReAlloc
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
DuplicateHandle
GetVersionExW
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetTickCount
GetSystemDirectoryW
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetConsoleMode
ReadConsoleW
ReadConsoleA
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetFileType
GetModuleHandleExW
CreateWaitableTimerA
OpenEventA
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ExitThread
LoadLibraryExW
GetThreadTimes
OpenThread
GetCurrentThread
RaiseException
CreateWaitableTimerExW
SetWaitableTimer
SleepEx
GetSystemPowerStatus
GetComputerNameW
GetModuleFileNameW
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
InitializeProcThreadAttributeList
GetProcessId
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
CreateEventW
CreatePipe
OutputDebugStringA
GetTempPathW
K32GetProcessMemoryInfo
WriteConsoleW
CreateEventExW
WaitForMultipleObjectsEx
TlsGetValue
GetUserDefaultLocaleName
WriteFile
FlushFileBuffers
CreateFileA
GetCommandLineW
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GetThreadPriority
GlobalMemoryStatusEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetFullPathNameW
VerifyVersionInfoW
CloseHandle
Sleep
CreateEventA
WaitForSingleObjectEx
SetEvent
FormatMessageW
SetHandleInformation
SetDllDirectoryW
LoadLibraryW
GetLastError
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcessId
MultiByteToWideChar
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
TlsSetValue

user32

GetDoubleClickTime
KillTimer
SetTimer
PeekMessageA
MsgWaitForMultipleObjects
GetCaretBlinkTime
MessageBoxA
GetMessageA
SendMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
UnregisterClassW
GetUserObjectInformationW
GetProcessWindowStation
CreateWindowExW
SetDlgItemTextA
SetDlgItemTextW
SendDlgItemMessageW
CopyRect
OffsetRect
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
LoadIconA
MessageBoxW
EnumDisplaySettingsW
LoadIconW
SetWindowLongA
AdjustWindowRectEx
GetWindowPlacement
GetDC
EnumDisplaySettingsA
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputBuffer
GetRawInputDeviceInfoW
GetRawInputData
SystemParametersInfoW
GetWindowLongA
PtInRect
ScreenToClient
GetCursorPos
GetSystemMetrics
ReleaseCapture
IsWindowVisible
IsIconic
SetFocus
GetActiveWindow
GetFocus
DragDetect
ValidateRect
SetWindowTextW
GetClientRect
GetWindowRect
ShowCursor
SetCursorPos
ClientToScreen
ClipCursor
GetWindowLongPtrW
SetWindowLongPtrA
SetWindowLongPtrW
GetParent
EnumDisplayDevicesA
MonitorFromRect
MonitorFromWindow
GetMonitorInfoA
GetMonitorInfoW
EnumDisplayMonitors
UpdateWindow
GetDisplayConfigBufferSizes
QueryDisplayConfig
DisplayConfigGetDeviceInfo
GetDesktopWindow
ReleaseDC
AllowSetForegroundWindow
TrackMouseEvent
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
SetCursor
LoadCursorA
DestroyCursor
DestroyIcon
LoadImageW
GetThreadDesktop
GetUserObjectInformationA
RegisterWindowMessageA
SendMessageTimeoutA
SetForegroundWindow
EnumWindows
RegisterClassExW
DialogBoxParamW
SetCapture
MapVirtualKeyExA
MapVirtualKeyW
MapVirtualKeyA
ToUnicode
GetKeyNameTextW
GetAsyncKeyState
GetKeyState
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetMessageExtraInfo
DispatchMessageA
TranslateMessage
GetKeyboardLayout
GetKeyboardLayoutNameW
EndDialog

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ole32

CoSetProxyBlanket
CoUninitialize
CoInitialize
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateFreeThreadedMarshaler
PropVariantCopy
CoCreateInstance
PropVariantClear

shlwapi

SHDeleteKeyW
PathCanonicalizeW

setupapi

SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInfo

advapi32

GetUserNameA
GetTokenInformation
GetSidSubAuthority
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExW
RegDeleteValueA
RegCreateKeyW
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
DeregisterEventSource
RegisterEventSourceW
CryptEnumProvidersW

gdi32

GetDeviceCaps
SetPixelFormat
SwapBuffers
ChoosePixelFormat

shell32

SHFileOperationW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW

opengl32

wglCreateContext
wglMakeCurrent
wglGetCurrentDC
wglDeleteContext
wglGetProcAddress
wglGetCurrentContext

winmm

waveInStart
waveOutGetDevCapsW
waveOutGetDevCapsA
waveOutGetNumDevs
timeGetTime
waveOutPrepareHeader
waveOutUnprepareHeader
timeBeginPeriod
waveInReset
waveOutWrite
waveOutReset
waveOutGetPosition
waveInGetNumDevs
waveInGetDevCapsA
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
timeEndPeriod
waveOutClose
waveInUnprepareHeader
waveInAddBuffer
waveOutOpen

oleaut32

VariantChangeType
SysAllocString
VariantClear
VariantInit
SysFreeString

imm32

ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContextEx
ImmAssociateContext
ImmReleaseContext
ImmGetConversionStatus
ImmNotifyIME
ImmGetContext

winhttp

WinHttpGetIEProxyConfigForCurrentUser

bcrypt

BCryptGenRandom

hid

HidP_SetUsageValue
HidP_SetUsages
HidP_GetData
HidP_MaxDataListLength
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetProductString
HidD_GetManufacturerString
HidD_GetSerialNumberString
HidD_GetAttributes

crypt32

CertAddEncodedCertificateToStore
CertFreeCertificateContext
CertCloseStore
CertOpenStore
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty

ws2_32

WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
gethostname
socket
shutdown
setsockopt
sendto
send
select
WSASocketA
recv
ntohs
listen
inet_addr
htons
htonl
getsockname
ioctlsocket
WSASetEvent
closesocket
bind
accept
__WSAFDIsSet
getaddrinfo
freeaddrinfo
getnameinfo
ntohl
getpeername
gethostbyname
getprotobyname
WSARecvFrom
getsockopt
WSACloseEvent
WSACreateEvent
WSASocketW
WSAWaitForMultipleEvents
WSAIoctl
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
gethostbyaddr
WSASendDisconnect
WSAAsyncGetHostByName
WSACancelAsyncRequest
recvfrom
connect

dwmapi

DwmGetWindowAttribute

Exports

Exports

UnityMain

Sections

.text
Size: 22.4MB - Virtual size: 22.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 405KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

321d9c9a4d2018622f1a6dad0b44e04e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7Certificate

Extended Key Usages

Key Usages

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52Certificate

Extended Key Usages

Key Usages

8d:6c:7f:05:82:78:0a:f1:17:0c:1e:36:dd:8b:eb:63:5e:70:22:ebSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

version

ole32

shlwapi

setupapi

advapi32

gdi32

shell32

opengl32

winmm

oleaut32

imm32

winhttp

bcrypt

hid

crypt32

ws2_32

dwmapi

Exports

Exports

Sections

.text Size: 22.4MB - Virtual size: 22.4MB

.rdata Size: 3.7MB - Virtual size: 3.7MB

.data Size: 405KB - Virtual size: 1.3MB

.pdata Size: 1.1MB - Virtual size: 1.1MB

.rodata Size: 3KB - Virtual size: 2KB

_RDATA Size: 68KB - Virtual size: 67KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 128KB - Virtual size: 128KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

0f:7c:5a:5e:06:2a:bd:ba:fc:be:1e:c6:3d:4c:30:52
Certificate

8d:6c:7f:05:82:78:0a:f1:17:0c:1e:36:dd:8b:eb:63:5e:70:22:eb
Signer

.text
Size: 22.4MB - Virtual size: 22.4MB

.rdata
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 405KB - Virtual size: 1.3MB

.pdata
Size: 1.1MB - Virtual size: 1.1MB

.rodata
Size: 3KB - Virtual size: 2KB

_RDATA
Size: 68KB - Virtual size: 67KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 128KB - Virtual size: 128KB