a34c8ef88f1d5ef5fecf9d269ad4154d63092169b98999bba98e00c07899dfbd

Sharing

Copy URL Twitter E-mail

General

Target

a34c8ef88f1d5ef5fecf9d269ad4154d63092169b98999bba98e00c07899dfbd
Size

23KB
MD5

4818e12541881a2842e607eae310b16c
SHA1

2266c8fd5993fbda3b4ce79882950869d7843675
SHA256

a34c8ef88f1d5ef5fecf9d269ad4154d63092169b98999bba98e00c07899dfbd
SHA512

63080b87592eab6ac789a6eebb737593bd8c5e1c24e8aba01902a497f0d29a267f92960fa97ca9f35d95f05c718da07a55b5f13f14b230cdaebd65cb0b0faec0
SSDEEP

192:bGdsDcrnLhzteqYqG20WCJDEm06lxW0GXdzThjGRZITEGE0asswXRAVITrc+F7YP:Kd8crniNk0jDEmjxU1TQRIxYf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34c8ef88f1d5ef5fecf9d269ad4154d63092169b98999bba98e00c07899dfbd

Files

a34c8ef88f1d5ef5fecf9d269ad4154d63092169b98999bba98e00c07899dfbd
.dll windows:6 windows x64 arch:x64

eaca479339d029267d0a31ba6bc3165d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\assemblage\Builds\3959732549296423747cwzltjmxie\anno_langunlock-master\assemblage_outdir_bin\uplay_r1_loader64.pdb

Imports

kernel32

VirtualProtect
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
K32GetModuleInformation
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

user32

MessageBoxA

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_onexit_table

Exports

Exports

UPLAY_ACH_EarnAchievement
UPLAY_ACH_GetAchievementImage
UPLAY_ACH_GetAchievements
UPLAY_ACH_ReleaseAchievementImage
UPLAY_ACH_ReleaseAchievementList
UPLAY_ACH_Write
UPLAY_AVATAR_Get
UPLAY_AVATAR_Release
UPLAY_FRIENDS_AddPlayedWith
UPLAY_FRIENDS_AddToBlackList
UPLAY_FRIENDS_GetFriendList
UPLAY_FRIENDS_Init
UPLAY_FRIENDS_InviteToGame
UPLAY_FRIENDS_IsBlackListed
UPLAY_FRIENDS_IsFriend
UPLAY_FRIENDS_RemoveFriendship
UPLAY_FRIENDS_RemoveFromBlackList
UPLAY_FRIENDS_RequestFriendship
UPLAY_FRIENDS_RespondToGameInvite
UPLAY_FRIENDS_ShowFriendSelectionUI
UPLAY_FRIENDS_ShowInviteFriendsToGameUI
UPLAY_GetLastError
UPLAY_GetNextEvent
UPLAY_GetOverlappedOperationResult
UPLAY_HasOverlappedOperationCompleted
UPLAY_INSTALLER_AreChunksInstalled
UPLAY_INSTALLER_GetChunkIdsFromTag
UPLAY_INSTALLER_GetChunks
UPLAY_INSTALLER_GetLanguageUtf8
UPLAY_INSTALLER_Init
UPLAY_INSTALLER_ReleaseChunkIdList
UPLAY_INSTALLER_UpdateInstallOrder
UPLAY_METADATA_ClearContinuousTag
UPLAY_METADATA_SetContinuousTag
UPLAY_METADATA_SetSingleEventTag
UPLAY_OPTIONS_Apply
UPLAY_OPTIONS_Close
UPLAY_OPTIONS_Enumerate
UPLAY_OPTIONS_Get
UPLAY_OPTIONS_Open
UPLAY_OPTIONS_ReleaseKeyValueList
UPLAY_OPTIONS_Set
UPLAY_OPTIONS_SetInGameState
UPLAY_OVERLAY_SetShopUrl
UPLAY_OVERLAY_Show
UPLAY_OVERLAY_ShowBrowserUrl
UPLAY_OVERLAY_ShowNotification
UPLAY_OVERLAY_ShowShopUrl
UPLAY_PARTY_GetFullMemberList
UPLAY_PARTY_GetId
UPLAY_PARTY_GetInGameMemberList
UPLAY_PARTY_Init
UPLAY_PARTY_InvitePartyToGame
UPLAY_PARTY_InviteToParty
UPLAY_PARTY_IsInParty
UPLAY_PARTY_IsPartyLeader
UPLAY_PARTY_PromoteToLeader
UPLAY_PARTY_RespondToGameInvite
UPLAY_PARTY_SetUserData
UPLAY_PARTY_ShowGameInviteOverlayUI
UPLAY_PRESENCE_SetPresence
UPLAY_PeekNextEvent
UPLAY_Quit
UPLAY_SAVE_Close
UPLAY_SAVE_GetSavegames
UPLAY_SAVE_Open
UPLAY_SAVE_Read
UPLAY_SAVE_ReleaseGameList
UPLAY_SAVE_Remove
UPLAY_SAVE_SetName
UPLAY_SAVE_Write
UPLAY_STORE_Checkout
UPLAY_STORE_GetPartner
UPLAY_STORE_GetProducts
UPLAY_STORE_IsEnabled
UPLAY_STORE_ReleaseProductsList
UPLAY_STORE_ShowProductDetails
UPLAY_STORE_ShowProducts
UPLAY_SetLanguage
UPLAY_Start
UPLAY_USER_ClearGameSession
UPLAY_USER_ConsumeItem
UPLAY_USER_GetAccountIdUtf8
UPLAY_USER_GetCPUScore
UPLAY_USER_GetCdKeyUtf8
UPLAY_USER_GetCdKeys
UPLAY_USER_GetConsumableItems
UPLAY_USER_GetEmailUtf8
UPLAY_USER_GetGPUScore
UPLAY_USER_GetGPUScoreConfidenceLevel
UPLAY_USER_GetNameUtf8
UPLAY_USER_GetProfile
UPLAY_USER_GetTicketUtf8
UPLAY_USER_IsInOfflineMode
UPLAY_USER_IsOwned
UPLAY_USER_ReleaseCdKeyList
UPLAY_USER_ReleaseConsumeItemResult
UPLAY_USER_ReleaseProfile
UPLAY_USER_SetGameSession
UPLAY_Update
UPLAY_WIN_GetActions
UPLAY_WIN_GetRewards
UPLAY_WIN_GetUnitBalance
UPLAY_WIN_RefreshActions
UPLAY_WIN_ReleaseActionList
UPLAY_WIN_ReleaseRewardList
UPLAY_WIN_SetActionsCompleted

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eaca479339d029267d0a31ba6bc3165d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 564B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 40B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 564B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 40B