anadius
Static task
static1
General
-
Target
anadius64.dll
-
Size
835KB
-
MD5
74b50896cd96125c684c7ce5dbcd9d5b
-
SHA1
be48074a89dd22b6c18b53e84e83f72ce60ff8c4
-
SHA256
c77fae5db9fce52d27cac2cb393f2631f7a0c8e1d7d5e3bc2f331fcc36d046dc
-
SHA512
9bcacfcdfb33d80c3a5de4e3aaa96a4d8446260a6e738502b0d76d336eeff942b90138e39b90ca35b85e2d7be5341754ad18f3e29c3397bc57769ab3ee90a0d8
-
SSDEEP
12288:Re9YJngTrsMd8eHAYAl/uAReKWplULmJZqLHBdPxurKXMyox8HiudUJ7:I94eslrelULmJZwIu8yPHiud
Score
1/10
Malware Config
Signatures
Files
-
anadius64.dll.dll windows x64
fe5a9c2af6607f78994fd6ab502c813e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleFileNameA
GetModuleFileNameW
LocalFree
GetCommandLineW
SetEnvironmentVariableW
CreateDirectoryW
ExitProcess
SetEnvironmentVariableA
VerSetConditionMask
VerifyVersionInfoW
Sleep
GetCurrentThread
GetModuleHandleW
GetProcAddress
AttachConsole
AllocConsole
GetConsoleWindow
WideCharToMultiByte
MultiByteToWideChar
GetEnvironmentVariableW
FindResourceA
SizeofResource
LoadResource
LockResource
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
GetCurrentProcessId
GetCurrentThreadId
CreateToolhelp32Snapshot
Thread32First
OpenThread
SuspendThread
CloseHandle
Thread32Next
CopyFileW
GetErrorMode
SetErrorMode
LoadLibraryW
FreeLibrary
FormatMessageA
TlsAlloc
GetLastError
CreateEventW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
WaitForMultipleObjects
TerminateThread
QueueUserAPC
SetEvent
SleepEx
PostQueuedCompletionStatus
CreateIoCompletionPort
SetWaitableTimer
GetQueuedCompletionStatus
SetLastError
CancelIoEx
TlsGetValue
TlsSetValue
TlsFree
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetTimeZoneInformation
HeapReAlloc
GetProcessHeap
GetCurrentProcess
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
LoadLibraryExW
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetStringTypeW
TryEnterCriticalSection
SwitchToThread
RtlPcToFileHeader
RaiseException
EncodePointer
DecodePointer
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
DeleteFileW
ReadFile
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
GetConsoleMode
ReadConsoleW
FlushFileBuffers
WriteFile
GetConsoleCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
user32
MoveWindow
MessageBoxW
MessageBoxA
shell32
SHGetFolderPathW
CommandLineToArgvW
SHGetFolderPathA
ws2_32
listen
select
ioctlsocket
closesocket
getsockname
WSASend
WSAStartup
WSASetLastError
htons
ntohs
connect
WSASocketW
setsockopt
WSAStringToAddressW
ntohl
WSARecv
htonl
WSACleanup
bind
WSAGetLastError
mswsock
GetAcceptExSockaddrs
AcceptEx
Exports
Exports
Sections
.text Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ