ac6650[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac6650.dll
Size

280KB
MD5

f40823c1026eb3f21a776482007e0a1a
SHA1

bf063fe9a877e5ce43b59c5367cc1806a2d3923b
SHA256

7cd414e0f6a1a7bb11360980738e1aa3408e4000914961e6cda3e0b2adb9ddd2
SHA512

6d9591d9a1d71e85dceda66a4134a7087d896d24f74e31f8fe2fef781e1a3e5ed1c082dd1a742390b6737f290450f2e7879b89cd435479d5923a19c82cfe2069
SSDEEP

3072:68jzAVAvzlS2fnwRwYUDnQ94oaJsQvVqRlkM4OAD/KLznBuB2JA2BjM:6uASvZS2K3UDLJsQvMRlkM4RD/qzMfUA

Score

N/A

Malware Config

Signatures

Files

ac6650.dll
.dll windows x86

f41788bd01d7a9a07e6e3f4b9c465da6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CloseHandle
DeviceIoControl
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetConsoleCtrlHandler
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FatalAppExitA
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
Sleep
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
RtlUnwind
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

AC6650_CloseDevice
AC6650_DI
AC6650_DI_BIT
AC6650_DO
AC6650_DO_BIT
AC6650_OpenDevice
AC6650_PRQ
AC6650_SN
ac6650_inb
ac6650_outb

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f41788bd01d7a9a07e6e3f4b9c465da6

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 157KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 15KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 160KB - Virtual size: 157KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 15KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB