ACE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d41a19092dd01d1dd93c54aadcb421eb4730b3f3da81b7467efc8c4242c9453c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d41a19092dd01d1dd93c54aadcb421eb4730b3f3da81b7467efc8c4242c9453c.dll
Resource
win10v2004-20240226-en
General
-
Target
d41a19092dd01d1dd93c54aadcb421eb4730b3f3da81b7467efc8c4242c9453c
-
Size
1.3MB
-
MD5
41d805f51e1d10a97776cbcc9ae2fcbb
-
SHA1
d5b70a1db4826af97ca296bc980f50609279dc88
-
SHA256
d41a19092dd01d1dd93c54aadcb421eb4730b3f3da81b7467efc8c4242c9453c
-
SHA512
c6ab2309cf0b8c9c76c9d3f778b1797c39907e723e7c4bb4ed7d475220c94dc7a6f431abcdc803a7121bd2d89d2f774234a3ca5eccaf0419997f7dc1a493154f
-
SSDEEP
24576:gGB88ZazX8zzR5eQvkzDYpQPIAS0oopoojR+imUe/MqydMBw8RXs+FX:gGOXqe7MpQPIASwR+im9WeXH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d41a19092dd01d1dd93c54aadcb421eb4730b3f3da81b7467efc8c4242c9453c
Files
-
d41a19092dd01d1dd93c54aadcb421eb4730b3f3da81b7467efc8c4242c9453c.dll windows:6 windows x86 arch:x86
4e4b05cad20fe53b1300d53ec79b7e81
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LeaveCriticalSection
GetSystemTime
GetModuleFileNameW
GetModuleHandleA
SystemTimeToFileTime
InitializeCriticalSection
DeleteCriticalSection
GetSystemDirectoryA
FreeLibrary
GetProcAddress
GlobalMemoryStatus
LoadLibraryA
GetProfileStringA
CreateDirectoryW
MultiByteToWideChar
CreateFileW
DeleteFileW
FindClose
EnterCriticalSection
FindNextFileW
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetLastError
MoveFileExW
FileTimeToSystemTime
WideCharToMultiByte
IsValidCodePage
GetACP
Sleep
GetCurrentProcess
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThreadId
GetCurrentProcessId
CreateSemaphoreA
ReleaseSemaphore
CreateThread
CloseHandle
WaitForSingleObject
VerifyVersionInfoW
GetSystemInfo
IsProcessorFeaturePresent
FindFirstFileW
VerSetConditionMask
QueryPerformanceCounter
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
user32
LoadStringA
gdi32
GetICMProfileW
DeleteDC
CreateDCW
CreateDCA
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA
shell32
SHGetFolderPathW
ole32
CoCreateInstance
msvcp120
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Xbad_alloc@std@@YAXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
msvcr120
memcpy
memset
??3@YAXPAX@Z
memcpy_s
strcmp
strlen
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
vsprintf_s
memcmp
memmove
free
malloc
realloc
_purecall
??2@YAPAXI@Z
__iob_func
fprintf
strtoul
strncmp
strncpy
strstr
fabs
pow
??_V@YAXPAX@Z
sscanf
sprintf
_gmtime64
_time64
qsort
strcpy
strcat
wcslen
wcsstr
wcstok_s
log
wcscmp
towupper
sqrt
strnlen
_vsnprintf
log10
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
??1type_info@@UAE@XZ
_except1
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
Exports
Exports
ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACEInitializeEx
ACETerminate
Sections
.text Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 420KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ