g:\Acro_root_at\bravo\public\libraries\windows\release\dynamic\ace2mtdll\ACE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7ed2b49fd78f1e8299bc660333182ab97da2cffe0a53d7c1c4f9ea96cb743c21N.dll
Resource
win7-20241010-en
General
-
Target
7ed2b49fd78f1e8299bc660333182ab97da2cffe0a53d7c1c4f9ea96cb743c21N.exe
-
Size
847KB
-
MD5
d43c791d583c4a7175ab01c5734565f0
-
SHA1
3d9124c80d48352127f8f9998939378fa802095f
-
SHA256
7ed2b49fd78f1e8299bc660333182ab97da2cffe0a53d7c1c4f9ea96cb743c21
-
SHA512
bd34e5aca0155644b340b01486f4051c9faf7860429e866dd8b338c4a65b330e5c7aa8978c08a1075b82ed1004109b82f99f9c1cb634c4bab281e47074e40cd6
-
SSDEEP
24576:Uzb1MlCKUQyUmjtczu6Prs9pgWoopooK9kwPKxyCFrKTE:UzbKsUmjtcdPGgIwPKjFr0E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ed2b49fd78f1e8299bc660333182ab97da2cffe0a53d7c1c4f9ea96cb743c21N.exe
Files
-
7ed2b49fd78f1e8299bc660333182ab97da2cffe0a53d7c1c4f9ea96cb743c21N.exe.dll windows:4 windows x86 arch:x86
8dc04edfabe4cb9b5337e4d10fdd8f4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FindClose
FindFirstFileA
SystemTimeToFileTime
GetSystemTime
GetProfileStringA
LoadLibraryA
FreeLibrary
GlobalMemoryStatus
GetSystemDirectoryA
GetFileAttributesA
CreateDirectoryA
MultiByteToWideChar
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
GetLastError
GetModuleFileNameA
IsValidCodePage
Sleep
SetProcessAffinityMask
GetProcessAffinityMask
GetCurrentProcess
CreateThread
CloseHandle
TerminateThread
CreateEventA
SetEvent
WaitForSingleObject
WaitForMultipleObjects
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetVersionExA
GetACP
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
user32
wsprintfA
LoadStringA
gdi32
GetICMProfileA
DeleteDC
CreateDCA
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegQueryValueExA
shell32
SHGetFolderPathA
ole32
CoCreateInstance
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr80
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
strcmp
strlen
malloc
free
_purecall
_gmtime64
_time64
strncmp
sprintf
strcpy
pow
fabs
??0exception@std@@QAE@ABQBD@Z
strncpy
??_V@YAXPAX@Z
_invalid_parameter_noinfo
??2@YAPAXI@Z
strrchr
tolower
qsort
log
strcat
??0exception@std@@QAE@ABQBDH@Z
fclose
ftell
fseek
fread
fwrite
remove
rename
_strupr
sqrt
strncat
memcmp
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
memset
fopen
memcpy
_CxxThrowException
Exports
Exports
ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACETerminate
Sections
.text Size: 469KB - Virtual size: 469KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE