aclui[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

aclui.dll.exe
Size

504KB
MD5

64b8a018bf2ad0ba7d75b0db44bbe024
SHA1

29345e6e22797e6efe04e2ade99fad3fd27766bf
SHA256

8484560c1526ee2e313a2b57f52ea5b31edd05a0c9664bd7f60da020871bfe6f
SHA512

072fb970129818e690c1a5bb1ac529c4e2ae4ec5bf1225ce83e9ce2df0852050cc542462f1b2b05301401adc62c69a2656c9eb36f0ab37bd518f7d38b866dc16
SSDEEP

12288:K3MJlyxaCvno56Flwm1VKDjmCC3qbUHZZqSqAfLnU7:K8PUaGniswm1VImCTQLhg7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aclui.dll.exe

Files

aclui.dll.exe
.dll windows:6 windows x64 arch:x64

d3fb0063b79dcb771ae45084b7b0cdc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\bamboo\home\xml-data\build-dir\CODRU-CLC3-SOURCES\bin\x64\Release\critical_fixups.pdb

Imports

kernel32

GetLastError
LoadLibraryW
CloseHandle
FormatMessageA
GetProcAddress
SetDllDirectoryW
MultiByteToWideChar
WriteConsoleW
CreateFileW
FreeLibrary
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
SetFilePointerEx
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapReAlloc
HeapFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize

advapi32

RegGetValueW

wintrust

CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseContext

Exports

Exports

edit
check_critical_self_protect_rules

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

a9g$!)v
Size: 267KB - Virtual size: 268KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3fb0063b79dcb771ae45084b7b0cdc5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

wintrust

Exports

Exports

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 4KB - Virtual size: 9KB

.pdata Size: 8KB - Virtual size: 7KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

a9g$!)v Size: 267KB - Virtual size: 268KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 4KB - Virtual size: 9KB

.pdata
Size: 8KB - Virtual size: 7KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

a9g$!)v
Size: 267KB - Virtual size: 268KB