ua-loader-v8.zip
- SHA256 4af4d753fe710cc9db28147a8b89babe7471107e2b29b8fa2fecfbf06e38d842
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UAloader.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
UAloader.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
General
- Target ua-loader-v8.zip
- Size 3.5MB
- Sample261113-db2mpsy16l
- SHA256 4af4d753fe710cc9db28147a8b89babe7471107e2b29b8fa2fecfbf06e38d842
- MD5 f7a6f2271cbb275781ecbd378ad81b02
- SHA1 51b5b8f2def1c4480daa8db2e58ff56362d84fba
- SHA512 f14393990e57314fa6b572d3661d8622a9a9c2f4f6da7cbd37fb209df1874b0ddd01a5605cc114639e15b58bfc227443910e347d544c022d19af4a2ab50fc9b4
- SSDEEP 98304:ZyZkiiSfswQi9N5R4nXg+ILyQ3HtZNt5CnnJBXbDR9En:Z1ipQi9NT4nXWn37NynnTl9En
- TLSH T15A06332FB04659EAF86B65459FEB33D0F2961E2831465E26189D33C8B1CE2D77E034E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/UAloader.exe
File Explorer
-
ua-loader-v8.zip.zip 3.5MB
-
UAloader.exe.exe 4.9MB
UAloader.exe
- IMPHASH e025e689a59a3d9e13403cef3a7a46a5
- SHA256 51e518836fa8cbc63d4acc5a62debcf2b384788896c877898461792489392d49
- MD5 2e38ef2ac38936c3fac1bb9ef7cffce0
- SHA1 c55c11ecb56ef2fdd8b7129641834c66362c3136
- SHA512 ae01dd6def1d17dd16320cb4b6f5962e53f6fd0a4226afed3d1afbdc1ccdecb2b0ecce29bb4be057d913fa092dd61d210e8c632d48fddd11fadefa2e3bf52506
- SSDEEP 98304:CEXIp7Di4ey8F4IO5bvOHKV0++vvCfQ9A:CEYdey8FxOl1C++vafQ9A
- TLSH T1D636F152B2E801E8E277D13C89DA964BE6B2781907319ACB13F446991F277E10F7F325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1046032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Wes\Desktop\addadadad\unlockall-main\out\Release\UAloader.pdb
api-ms-win-core-processenvironment-l1-1-0
SetStdHandle
GetStdHandle
GetCommandLineA
GetEnvironmentVariableW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
api-ms-win-core-file-l1-1-0
FlushFileBuffers
SetEndOfFile
GetFileSizeEx
FindNextFileW
WriteFile
FindFirstFileExW
ReadFile
GetFileAttributesW
DeleteFileW
FindClose
CreateFileW
CreateDirectoryW
SetFilePointerEx
GetFileType
api-ms-win-core-debug-l1-1-0
IsDebuggerPresent
OutputDebugStringW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
SetLastError
RaiseException
GetLastError
UnhandledExceptionFilter
api-ms-win-core-synch-l1-1-0
WaitForSingleObjectEx
DeleteCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
AcquireSRWLockExclusive
EnterCriticalSection
TryAcquireSRWLockExclusive
WaitForSingleObject
api-ms-win-core-synch-l1-2-0
SleepConditionVariableSRW
WakeAllConditionVariable
Sleep
WakeConditionVariable
api-ms-win-core-processthreads-l1-1-0
GetCurrentThread
TerminateProcess
ExitProcess
ResumeThread
ExitThread
GetCurrentProcess
CreateThread
OpenProcessToken
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
GetStartupInfoW
GetCurrentProcessId
GetExitCodeProcess
CreateProcessW
api-ms-win-core-sysinfo-l1-1-0
GetTickCount64
GetLocalTime
GetLogicalProcessorInformationEx
GetSystemTimeAsFileTime
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
GetModuleHandleA
LoadResource
GetProcAddress
LoadLibraryExW
LockResource
SizeofResource
GetModuleFileNameW
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-1
FindResourceW
LoadLibraryA
api-ms-win-security-base-l1-1-0
AdjustTokenPrivileges
GetTokenInformation
api-ms-win-security-lsalookup-l2-1-0
LookupPrivilegeValueW
api-ms-win-ntuser-sysparams-l1-1-0
GetSystemMetrics
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
WideCharToMultiByte
CompareStringEx
GetStringTypeW
CompareStringW
api-ms-win-core-registry-l1-1-0
RegCreateKeyExW
RegSetValueExA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
api-ms-win-core-toolhelp-l1-1-0
Process32NextW
CreateToolhelp32Snapshot
Process32FirstW
api-ms-win-security-cryptoapi-l1-1-0
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptHashData
CryptAcquireContextW
CryptDestroyHash
api-ms-win-core-heap-l2-1-0
GlobalAlloc
LocalFree
GlobalFree
api-ms-win-core-heap-obsolete-l1-1-0
GlobalUnlock
GlobalLock
d3dcompiler_47
D3DCompile
api-ms-win-core-sysinfo-l1-2-0
GetSystemTimePreciseAsFileTime
VerSetConditionMask
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
api-ms-win-core-localization-l1-2-0
LCMapStringEx
FormatMessageA
GetLocaleInfoEx
GetACP
IsValidCodePage
LCMapStringW
GetCPInfo
GetLocaleInfoA
EnumSystemLocalesW
GetUserDefaultLCID
GetOEMCP
GetLocaleInfoW
IsValidLocale
advapi32
RegRenameKey
shell32
ShellExecuteExW
ShellExecuteW
d3d11
D3D11CreateDeviceAndSwapChain
dwmapi
DwmGetColorizationColor
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
user32
SetWindowPos
PeekMessageW
CreateWindowExW
RegisterClassExW
DispatchMessageW
TranslateMessage
DestroyWindow
UnregisterClassW
PostQuitMessage
UpdateWindow
GetWindowRect
ShowWindow
DefWindowProcW
MessageBoxA
GetCursorPos
SetProcessDPIAware
MonitorFromWindow
ScreenToClient
ClientToScreen
SetCursor
GetWindowLongPtrW
LoadCursorW
OpenClipboard
SetCursorPos
GetClientRect
GetDC
GetForegroundWindow
CloseClipboard
SetClipboardData
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetClipboardData
ReleaseDC
EmptyClipboard
GetKeyboardLayout
TrackMouseEvent
GetKeyState
GetMessageExtraInfo
ExitWindowsEx
gdi32
CreateRectRgn
GetDeviceCaps
DeleteObject
imm32
ImmSetCandidateWindow
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-interlocked-l1-1-0
InterlockedPushEntrySList
InterlockedFlushSList
InitializeSListHead
api-ms-win-core-rtlsupport-l1-1-0
RtlUnwindEx
RtlVirtualUnwind
RtlCaptureContext
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwind
api-ms-win-core-fibers-l1-1-0
FlsGetValue
FlsAlloc
FlsFree
FlsSetValue
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-heap-l1-1-0
HeapReAlloc
GetProcessHeap
HeapAlloc
HeapSize
HeapFree
api-ms-win-core-file-l1-2-0
GetTempPathW
api-ms-win-core-fibers-l1-1-1
IsThreadAFiber
api-ms-win-core-memory-l1-1-0
VirtualProtect
api-ms-win-core-datetime-l1-1-0
GetTimeFormatW
GetDateFormatW
api-ms-win-core-console-l1-1-0
WriteConsoleW
GetConsoleOutputCP
GetConsoleMode
SetConsoleCtrlHandler
ReadConsoleW
api-ms-win-core-timezone-l1-1-0
GetTimeZoneInformation
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
286KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=179, id=261, version=33145,
count=32, id=260, version=33145,
count=23, id=259, version=33145,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=91, id=261, version=35721,
count=14, id=257, version=33145,
count=73, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=209, id=1, productName=Unmarked objects,
count=7, id=261, version=36260,
count=1, id=255, version=36260,
count=1, id=151,
count=1, id=258, version=36260,