C:\Users\DANYA\Desktop\External-R6-Cheat-main\x64\Release\uc-r6-external.pdb
Static task
static1
1 signatures
General
-
Target
uc-r6-external.exe
-
Size
217KB
-
MD5
e42c9648f635ba8587be15a6815a7951
-
SHA1
311ed113c20f6d657a99153f8977e90ec735f329
-
SHA256
5cd331ee4e1205eead92f59fa56a4ca5c9cfe73767905aa03ce8df217e892e08
-
SHA512
51990e8d01c6f8ec73cf425f799d900bd6a9e8f2a8c0ca566e17294eab353c6e74b867ccf348f8a2cdb14e6e500c7290f9b2372c2ff63f7f4755ca1685bf6caf
-
SSDEEP
3072:CEl0vO5d3304AAo+mq5YE4t8XEfR+qgqqgHZv3aAPq8mdMcowBABn1Qe9o8O:r5pzP5szZ+2i38NcynZ9o8
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource uc-r6-external.exe
Files
-
uc-r6-external.exe.exe windows:6 windows x64 arch:x64
1df229ca517135bc5f59942b7b5f3bd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetStdHandle
CreateToolhelp32Snapshot
Process32Next
CloseHandle
FillConsoleOutputAttribute
GetCurrentProcessId
SetConsoleCursorPosition
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
Process32First
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
QueryPerformanceCounter
GlobalUnlock
QueryPerformanceFrequency
GlobalLock
GlobalAlloc
GlobalFree
GetModuleHandleW
EnterCriticalSection
user32
TranslateMessage
LoadIconA
PeekMessageA
CreateWindowExA
DefWindowProcA
GetForegroundWindow
MessageBoxA
SetWindowLongA
GetWindow
DispatchMessageA
DestroyWindow
SetWindowPos
ShowWindow
mouse_event
SetClipboardData
GetClipboardData
EmptyClipboard
PostQuitMessage
FindWindowA
GetAsyncKeyState
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
SetCapture
ClientToScreen
GetCapture
RegisterClassExA
GetActiveWindow
UpdateWindow
GetKeyState
LoadCursorA
ScreenToClient
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
msvcp140
_Thrd_detach
_Query_perf_counter
_Thrd_sleep
_Cnd_do_broadcast_at_thread_exit
_Xtime_get_ticks
?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Query_perf_frequency
dwmapi
DwmExtendFrameIntoClientArea
d3d9
Direct3DCreate9Ex
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
memset
__C_specific_handler
__current_exception_context
__current_exception
__std_exception_copy
__std_terminate
strstr
memchr
memcpy
memmove
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__stdio_common_vsprintf
_wfopen
fwrite
__p__commode
fread
__stdio_common_vsscanf
__stdio_common_vfprintf
fseek
fclose
fflush
__acrt_iob_func
ftell
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_exit
_get_initial_narrow_environment
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
exit
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
terminate
_beginthreadex
_initterm
api-ms-win-crt-math-l1-1-0
sinf
ceilf
fmodf
floorf
cosf
__setusermatherr
sqrtf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ