UC Release Final_[unknowncheats.me]_.zip
- SHA256 c20cfcadca502bc01c854a8d569a8f4f034c15089c58d4459b098cccbcc064be
Overview
overview
7Static
static
3UC Release...le.exe
windows10-2004-x64
7UC Release...le.exe
windows11-ltsc_2024-x64
7UC Release...le.exe
windows10-2004-x64
7UC Release...le.exe
windows11-ltsc_2024-x64
7UC Release...CK.dll
windows10-2004-x64
1UC Release...CK.dll
windows11-ltsc_2024-x64
1UC Release...se.dll
windows10-2004-x64
1UC Release...se.dll
windows11-ltsc_2024-x64
1Behavioral task
behavioral1
Sample
UC Release Final/FinalNoConsole.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
UC Release Final/FinalNoConsole.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
UC Release Final/FinalWithConsole.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
UC Release Final/FinalWithConsole.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
UC Release Final/Lib/GFCK.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
UC Release Final/Lib/GFCK.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
UC Release Final/Lib/ghub_mouse.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
UC Release Final/Lib/ghub_mouse.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target UC Release Final_[unknowncheats.me]_.zip
- Size 23.5MB
- Sample260712-jsjfcaes7k
- SHA256 c20cfcadca502bc01c854a8d569a8f4f034c15089c58d4459b098cccbcc064be
- MD5 cf047ae46396819c72a3d0eb33325dcd
- SHA1 5892e60ae7ac5e89c43472b7c63c2e48d5231a8f
- SHA512 f63fcec42d7d2d4acea3a0884743d7e04834c508fa8e7877a38e92c238919f772d4357e7fbaee30a776f9e4da14a6cb98e37ed1fb15e79d75cb292dfc5c7dd33
- SSDEEP 393216:mguVC9gjDnBjaREOIypCgSQE0FkFx9A9sf3v7e60NLC/Vkp//DJPCUGogANgalSA:mguV2inoRFIzrlEO9A9n60g6pTJPC0NT
- TLSH T19E4733E929D8B96F323BD9B302F40F0C3288DE3C74741BAA5DF945B478B74E54A25096
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 2 IoCs
resource yara_rule static1/unpack001/UC Release Final/FinalNoConsole.exe pyinstaller static1/unpack001/UC Release Final/FinalWithConsole.exe pyinstaller - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/UC Release Final/FinalNoConsole.exe unpack001/UC Release Final/FinalWithConsole.exe unpack001/UC Release Final/Lib/GFCK.dll unpack001/UC Release Final/Lib/ghub_mouse.dll
File Explorer
-
UC Release Final_[unknowncheats.me]_.zip.zip 23.5MB
-
UC Release Final/FinalNoConsole.exe.exe 12.2MB
-
control_panel.pyc30KB
-
UC Release Final/FinalWithConsole.exe.exe 12.2MB
-
control_panel.pyc30KB
-
UC Release Final/Lib/GFCK.dll.dll 12KB
-
UC Release Final/Lib/ghub_mouse.dll.dll 91KB
-
UC Release Final/Readme.txt277B
-
UC Release Final/config.ini1KB
-
UC Release Final/themes/default.ini3KB
UC Release Final/FinalNoConsole.exe
- IMPHASH 72c4e339b7af8ab1ed2eb3821c98713a
- SHA256 f8bda84ca0ecf5f603e2658e679fa221885c00e81a9666bc5f349a0c7b324259
- MD5 7902f31f3344adbe69cb41fee89b1d66
- SHA1 a63fdc0f36c0f8846384ba4c83852e010cc839ce
- SHA512 cf08d6c53f773e92bf86daab898c248d7fe60f7d8a2254ed5be8163e533b978ba0eb7779d9955b0bf793808f32856f1d32b1cdad71288f2d41e44fc97d565041
- SSDEEP 393216:kKc9ecpf/pp7bXMCHWUjNGwfk9telG9J4:kKcQwplXMb8NZfwel
- TLSH T145D612B0E1B0E67AE3A6A0FD4E9285A1A41F2F1363147C9D455230C25E72D4AF6DB4CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
52656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
GetCurrentDirectoryW
LCMapStringW
CompareStringW
FlsFree
GetOEMCP
GetCPInfo
GetModuleHandleW
MulDiv
FormatMessageW
GetLastError
GetModuleFileNameW
LoadLibraryExW
SetDllDirectoryW
CreateSymbolicLinkW
GetProcAddress
GetEnvironmentStringsW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
FlsSetValue
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
CreateDirectoryW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
423KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=180, id=261, version=30795,
count=10, id=260, version=30795,
count=3, id=253, version=33808,
count=9, id=259, version=33808,
count=17, id=260, version=33808,
count=40, id=261, version=33808,
count=11, id=257, version=30795,
count=155, id=1, productName=Unmarked objects,
count=25, id=260, version=34120,
count=1, id=258, version=34120,
control_panel.pyc
- SHA256 4db370b26f5557346ac426b63e9042bf15c8be62d96ba1c44be89e920268c028
- MD5 92ddf6cb6eeda934c90544c64ea31e5e
- SHA1 68292489fbfa1017d97e323b977339301ac166b1
- SHA512 225db5de58e3a1dd80177ef6bdc4e61a38cd3d8aa9ccc3cb16667bbb0d3d5e7511c8a39831a1580b63efa8fd1a15c8b5831654e6253f2258365d2732cf1c8172
- SSDEEP 768:L6ULQEXhuK+URTS/1coiRaXh1USY7cFYzQcV:L6UL3YK+URO/+oE+vYicV
- TLSH T156D2B49677A7C033F861F0F8542A3B5EF766C671B305D30356BB40296C8A2A69DB14CE
- MD5 SHA1 SHA512 SSDEEP TLSH
UC Release Final/FinalWithConsole.exe
- IMPHASH a06f302f71edd380da3d5bf4a6d94ebd
- SHA256 7a1a8eed43ca783bcc19c6d57d1db0aab5d3d88d6257018664018948af28884b
- MD5 d0e6a5883cb391d36998da66d15214b5
- SHA1 a7ba07391a125059c96cbfccae9564b7ffdddc26
- SHA512 83fc41f93d0cec819d39770c9ddcbeced007476be8b1b0b116bd1b794b4fc8fd4c8910f94449906ad5db265a3963268dba4f28b3a9b405dc3996c93fe8a067f0
- SSDEEP 393216:nKc9ecpf/pp7bXMCHWUjNGwfk9telG9J4:nKcQwplXMb8NZfwel
- TLSH T17ED612B0E1B0E67AE3A6A0FD4E9285A1A41F6F1323147C9D455230C25E72D4AF6DB4CF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
49952
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
TranslateMessage
ShutdownBlockReasonCreate
GetWindowThreadProcessId
SetWindowLongPtrW
GetWindowLongPtrW
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
GetMessageW
kernel32
GetTimeZoneInformation
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
FormatMessageW
GetLastError
GetModuleFileNameW
LoadLibraryExW
SetDllDirectoryW
CreateSymbolicLinkW
GetProcAddress
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
HeapSize
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LocalFree
SetConsoleCtrlHandler
GetConsoleWindow
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesExW
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetDriveTypeW
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
SetEnvironmentVariableW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
423KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=179, id=261, version=30795,
count=10, id=260, version=30795,
count=2, id=253, version=33808,
count=9, id=259, version=33808,
count=17, id=260, version=33808,
count=40, id=261, version=33808,
count=7, id=257, version=30795,
count=137, id=1, productName=Unmarked objects,
count=25, id=260, version=34120,
count=1, id=258, version=34120,
control_panel.pyc
- SHA256 4db370b26f5557346ac426b63e9042bf15c8be62d96ba1c44be89e920268c028
- MD5 92ddf6cb6eeda934c90544c64ea31e5e
- SHA1 68292489fbfa1017d97e323b977339301ac166b1
- SHA512 225db5de58e3a1dd80177ef6bdc4e61a38cd3d8aa9ccc3cb16667bbb0d3d5e7511c8a39831a1580b63efa8fd1a15c8b5831654e6253f2258365d2732cf1c8172
- SSDEEP 768:L6ULQEXhuK+URTS/1coiRaXh1USY7cFYzQcV:L6UL3YK+URO/+oE+vYicV
- TLSH T156D2B49677A7C033F861F0F8542A3B5EF766C671B305D30356BB40296C8A2A69DB14CE
- MD5 SHA1 SHA512 SSDEEP TLSH
UC Release Final/Lib/GFCK.dll
- IMPHASH e201f3970ce916dd87e800bba790e4d8
- SHA256 f530f38d23cdbbb1fbb2e282907fdbc256290b0e6e2c4ea5f714ea370623c383
- MD5 eda4d7650e00994650e49fdcf764d5ca
- SHA1 5a59fa7a3a31a8857470510385d8009cbac307dc
- SHA512 4e866cd0aecfb27aa33ab4438c8191a65a5fd0cd178648f13a038069f59ef37143482978b6bb3ab723ff87a57db83ace3a5f32b521e1a9797c82fadf1a715670
- SSDEEP 96:Eg58eAQKtyJhbJGkb4yRY3Ep+vuA9jJTZrtDl0SoYrfVezyh8xXIJhr/dgBYcXS6:z8YJhPbvOEOhjD+LYzw+y4JJuBYcv
- TLSH T14E421989FA8145F9D56902F4C8B30F16E2F9771017221BCF0370650B1F62BC6A56BADA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5776
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\FINALSMACHINE\Source\Repos\logitech-DLL\x64\Release\logitech-cve.pdb
user32
MessageBoxA
ntdll
RtlLookupFunctionEntry
RtlCaptureContext
ZwClose
NtCreateFile
NtDeviceIoControlFile
RtlInitUnicodeString
RtlVirtualUnwind
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
api-ms-win-crt-runtime-l1-1-0
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
mouse_close
mouse_move
mouse_open
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33731,
count=3, id=259, version=33731,
count=8, id=260, version=33731,
count=11, id=261, version=33731,
count=7, id=257, version=30795,
count=39, id=1, productName=Unmarked objects,
count=2, id=264, version=33811,
count=1, id=256, version=33811,
count=1, id=255, version=33811,
count=1, id=258, version=33811,
UC Release Final/Lib/ghub_mouse.dll
- IMPHASH 98c029186bf6d388c0178d9fea123445
- SHA256 87e760209f90e4ef1fb64320432e0eeaa17aba214c7d57b3c6bc400ef0f9d2df
- MD5 4b96b5fe6b6d453f88c1bdd640507057
- SHA1 06c276e59cf048da5333a7364c1a86b374f98908
- SHA512 e8b1b7a2a6c5e482615dab2e16128635fa655782725440163b23b2ccb6bcbebe48bd864e34567830d38f862bfbe6967c63ce0aa4720cc6bd666b4d26391fc726
- SSDEEP 1536:ZI//x6UsVfCkBSiSbSbEha/p/wJBVKsWtxld09dlaQLsZ:ZI//xK8kBDSmQM/p4nV+lMcQYZ
- TLSH T1BD93385BB6E500BBE4368638C8630E29D772F8151625DF6F0764025E6F273909E3AFB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ntdll
RtlUnwindEx
RtlInitUnicodeString
NtDeviceIoControlFile
NtCreateFile
NtClose
kernel32
HeapAlloc
CreateFileW
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
SetFilePointerEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetConsoleMode
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
CloseHandle
mouse_close
mouse_open
moveR
press
release
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=5, id=259, version=27412,
count=134, id=261, version=27412,
count=30, id=261, version=30034,
count=14, id=260, version=30034,
count=9, id=259, version=30034,
count=5, id=257, version=27412,
count=88, id=1, productName=Unmarked objects,
count=1, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,
count=1, id=256, productName=VS2019 v16.11.1 build 30133, version=30133,
count=1, id=258, productName=VS2019 v16.11.1 build 30133, version=30133,
UC Release Final/Readme.txt
- SHA256 cc82bc49bceca7f38b530b3ff1a76d5b2e0a16a571997f7f559319f4cd50d3ae
- MD5 7cde277a3d25cee9470ae7322ccb8ff6
- SHA1 b0e36f5d294b349d6c0f2d0ad4c0d2062a9af331
- SHA512 76058755c549b24a4134e8a73c8d32802b7580c5907f7af015e38faf676d813d89ed906be413f8ffc141746b0d85fe9965856888e11f8fb4820f67094d7b8787
- TLSH T1ACD02B8B540AC1A8F4C021AC1197AC25FF52C658E3DDA97CBC6D52099036515063475D
- MD5 SHA1 SHA512 TLSH
UC Release Final/config.ini
- SHA256 c192794a1b68ed0f44336f87dc6bf66628bfdb1c340e42d83550a653867513b7
- MD5 b5c145280b9e648bd4eed5c1583b0c4c
- SHA1 c4ea0fb648b46b74d14e6c3c9ebb6dcbc1bb03f8
- SHA512 0b43201a8e637e2379cc8dc928516a885d3dffe038a39e737f0ca45999e1f1553ae8f3d13150d0b64a7f42d9ad3a4456bd8037e9deb5cd4f6383bad8bb5104e6
- TLSH T1A931863A005A398E053ECB4C91A4424A6FD757061F51FCF1FE7D4AA9189A849A17C23F
- MD5 SHA1 SHA512 TLSH
UC Release Final/themes/default.ini
- SHA256 30120d4d9c3bb16e7288979f990d85308235fd9d579dbf0fd57bbe977643c1fa
- MD5 487d2fad276de5280d9c8d1565e4ee5e
- SHA1 b5fa0224448ceb04e1062d04cd2174f6b6e9dc84
- SHA512 b65d00961b151c5f331a4373c93fca018918c9d56435986607f6495d60a91c8b6cb35a6e4134a154aaac75a61488250ed05919b10fe00a60f5c43a9d101e2a11
- TLSH T14171F2B10B4445F016B9B3CEA991D7E22FA1F5EE1608BE08F34565A92847C8BCF04F87
- MD5 SHA1 SHA512 TLSH