A:\Dropbox\stuff\Programming\C#\NativeUI\NativeUI\obj\x64\Release\NativeUI.pdb
Overview
overview
3Static
static
3ASUniverse1.3.9b.rar
windows7-x64
3ASUniverse1.3.9b.rar
windows10-2004-x64
3Grab Conta...pr.ytd
windows7-x64
3Grab Conta...pr.ytd
windows10-2004-x64
3README.txt
windows7-x64
1README.txt
windows10-2004-x64
1scripts/AS...se.dll
windows7-x64
1scripts/AS...se.dll
windows10-2004-x64
1scripts/AS...se.ini
windows7-x64
1scripts/AS...se.ini
windows10-2004-x64
1scripts/AS...se.pdb
windows7-x64
3scripts/AS...se.pdb
windows10-2004-x64
3scripts/AS...se.xml
windows7-x64
3scripts/AS...se.xml
windows10-2004-x64
1scripts/AS...or.ini
windows7-x64
1scripts/AS...or.ini
windows10-2004-x64
1scripts/AS...ay.png
windows7-x64
3scripts/AS...ay.png
windows10-2004-x64
3scripts/AS...ed.png
windows7-x64
3scripts/AS...ed.png
windows10-2004-x64
3scripts/AS...ay.png
windows7-x64
3scripts/AS...ay.png
windows10-2004-x64
3scripts/AS...ow.png
windows7-x64
3scripts/AS...ow.png
windows10-2004-x64
3scripts/AS...ay.png
windows7-x64
3scripts/AS...ay.png
windows10-2004-x64
3scripts/AS...ed.png
windows7-x64
3scripts/AS...ed.png
windows10-2004-x64
3scripts/AS...ay.png
windows7-x64
3scripts/AS...ay.png
windows10-2004-x64
3scripts/AS...ed.png
windows7-x64
3scripts/AS...ed.png
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
ASUniverse1.3.9b.rar
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ASUniverse1.3.9b.rar
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Grab Contact Icon/char_mp_stripclub_pr.ytd
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Grab Contact Icon/char_mp_stripclub_pr.ytd
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
README.txt
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
README.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
scripts/ASUniverse.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
scripts/ASUniverse.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
scripts/ASUniverse.ini
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
scripts/ASUniverse.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
scripts/ASUniverse.pdb
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
scripts/ASUniverse.pdb
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
scripts/ASUniverse/ASUniverse.xml
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
scripts/ASUniverse/ASUniverse.xml
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
scripts/ASUniverse/GrabConnector.ini
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
scripts/ASUniverse/GrabConnector.ini
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
scripts/ASUniverse/Images/Vehicles/battery_gray.png
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
scripts/ASUniverse/Images/Vehicles/battery_gray.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
scripts/ASUniverse/Images/Vehicles/battery_red.png
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
scripts/ASUniverse/Images/Vehicles/battery_red.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
scripts/ASUniverse/Images/Vehicles/engine_gray.png
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
scripts/ASUniverse/Images/Vehicles/engine_gray.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
scripts/ASUniverse/Images/Vehicles/engine_yellow.png
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
scripts/ASUniverse/Images/Vehicles/engine_yellow.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
scripts/ASUniverse/Images/Vehicles/fuel_gray.png
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
scripts/ASUniverse/Images/Vehicles/fuel_gray.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
scripts/ASUniverse/Images/Vehicles/fuel_red.png
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
scripts/ASUniverse/Images/Vehicles/fuel_red.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
scripts/ASUniverse/Images/Vehicles/oil_gray.png
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
scripts/ASUniverse/Images/Vehicles/oil_gray.png
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
scripts/ASUniverse/Images/Vehicles/oil_red.png
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
scripts/ASUniverse/Images/Vehicles/oil_red.png
Resource
win10v2004-20240802-en
General
-
Target
ASUniverse1.3.9b.rar
-
Size
2.2MB
-
MD5
5b5a726b11f5b19ee6543b4397854138
-
SHA1
01b19f843de767f5071408986cb0c45ced1121d7
-
SHA256
1f530564040dd87b117567d6155f56fbc221040c8eef04901a393b2dfa387d4f
-
SHA512
68f93f053ab2257c405107a4b0eb26521a8c8f2e105d8be2eac7f94b23e3958c4f0af4e0eb46d94649b8a5a762b8a085055e5d76409fc78f8e95026950f31660
-
SSDEEP
49152:MNbU0kz4UZvjEBEvKhLYdMfPs80UUKKtzpx:MJd3UZQEUEqs8x6zpx
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/scripts/ASUniverse.dll unpack001/scripts/NativeUI.dll unpack001/scripts/iFruitAddon2.dll
Files
-
ASUniverse1.3.9b.rar.rar
-
Grab Contact Icon/char_mp_stripclub_pr.ytd
-
README.txt
-
scripts/ASUniverse.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
E DXZA Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
scripts/ASUniverse.ini
-
scripts/ASUniverse.pdb
-
scripts/ASUniverse/ASUniverse.xml
-
scripts/ASUniverse/GrabConnector.ini
-
scripts/ASUniverse/Images/Vehicles/battery_gray.png.png
-
scripts/ASUniverse/Images/Vehicles/battery_red.png.png
-
scripts/ASUniverse/Images/Vehicles/engine_gray.png.png
-
scripts/ASUniverse/Images/Vehicles/engine_yellow.png.png
-
scripts/ASUniverse/Images/Vehicles/fuel_gray.png.png
-
scripts/ASUniverse/Images/Vehicles/fuel_red.png.png
-
scripts/ASUniverse/Images/Vehicles/oil_gray.png.png
-
scripts/ASUniverse/Images/Vehicles/oil_red.png.png
-
scripts/ASUniverse/Images/Vehicles/temp_blue.png.png
-
scripts/ASUniverse/Images/Vehicles/temp_gray.png.png
-
scripts/ASUniverse/Images/Vehicles/temp_red.png.png
-
scripts/ASUniverse/Images/Vehicles/veh_Persistent.png.png
-
scripts/ASUniverse/Images/Vehicles/veh_notPersistent.png.png
-
scripts/ASUniverse/Images/asuniverse.jpg.jpg
-
scripts/ASUniverse/Images/grab.jpg.jpg
-
scripts/ASUniverse/Images/jobmanager.jpg.jpg
-
scripts/ASUniverse/Images/mazebank.jpg.jpg
-
scripts/ASUniverse/Images/weedhouse.jpg.jpg
-
scripts/ASUniverse/a.wav
-
scripts/ASUniverse/er.wav
-
scripts/ASUniverse/fuel_injector_bike.wav
-
scripts/ASUniverse/fuel_injector_car.wav
-
scripts/ASUniverse/jobs.xml
-
scripts/ASUniverse/key.wav
-
scripts/ASUniverse/marker.xml
-
scripts/ASUniverse/mo.wav
-
scripts/ASUniverse/no.wav
-
scripts/ASUniverse/reviews.xml
-
scripts/ASUniverse/teleporter.xml
-
scripts/ASUniverse/ui.wav
-
scripts/ASUniverse/ye.wav
-
scripts/NativeUI.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
scripts/NativeUI.xml.xml
-
scripts/iFruitAddon2.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\zero\Documents\Visual Studio 2017\scripts para GTAV\iFruitAddon2-master\obj\Debug\iFruitAddon2.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ