aimw[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

aimw.dll
Size

3.0MB
MD5

2d3220e7def39c57af79bdc6885fbb89
SHA1

54a721724cab8bb953072c02da56a6856c090f02
SHA256

8fe866a83bd4db3339a7d6d4bf1d2c0c774753d2f9aa9f42a3dcd32ba8154d21
SHA512

33bbadeaccc162656e974da11d40c544aee6918b289b670669ab9f617c090f9c0a4114ab271dcb45f950bdd29278bd25c36cd4152ca2d48ad48bb8605fc00464
SSDEEP

49152:G5deMBGAxOGs+975lr1IZksXrskJfMnq5xivJtbnKeO7BlMltLhhWrrJEm3:G5cAxxs+9ziskFMn4atbnKeqBlMlzho/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aimw.dll

Files

aimw.dll
.dll windows:6 windows x64 arch:x64

051073d34bb3f05b26c4957fd0b5fc72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\rat\aimware\maybe gay\x64\Release\aimw.pdb

Imports

kernel32

SizeofResource
SetConsoleTitleA
VirtualAlloc
FindResourceA
LoadLibraryA
LockResource
CreateThread
LoadResource
AddVectoredExceptionHandler
GetProcAddress
AllocConsole
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
QueryPerformanceCounter

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception
memset
__std_exception_copy
__std_exception_destroy
__current_exception_context
__C_specific_handler
_CxxThrowException
__std_type_info_destroy_list
memcpy

api-ms-win-crt-stdio-l1-1-0

freopen_s
__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_crt_atexit
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

051073d34bb3f05b26c4957fd0b5fc72

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 864B

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.reloc Size: 512B - Virtual size: 92B

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 864B

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

.reloc
Size: 512B - Virtual size: 92B