g:\Acro_root_at\bravo\public\libraries\windows\release\dynamic\ace2mtdll\ACE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
904bf74c214e2d3f97418b03a5ff4a8df07bcc618cc22841f9e6eb97aa0dd669.dll
Resource
win7-20240903-en
General
-
Target
904bf74c214e2d3f97418b03a5ff4a8df07bcc618cc22841f9e6eb97aa0dd669
-
Size
847KB
-
MD5
e39ce0a9490d34de9dcf5707efedbbae
-
SHA1
3dafc8544447630375959d8387510f33b0867dac
-
SHA256
904bf74c214e2d3f97418b03a5ff4a8df07bcc618cc22841f9e6eb97aa0dd669
-
SHA512
5a9f30c9c39b3a0d141d8ab7b03d203c54d4b3062551443831f317f393b4524ef5ac1dc8aca8b687b866150ad0e170b5369c10b987cde592606137ad9159aea6
-
SSDEEP
24576:2zb1MlCKUQyUmjtczu6Prs9pgWoopooK9kwPEs++iv:2zbKsUmjtcdPGgIwPEsriv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 904bf74c214e2d3f97418b03a5ff4a8df07bcc618cc22841f9e6eb97aa0dd669
Files
-
904bf74c214e2d3f97418b03a5ff4a8df07bcc618cc22841f9e6eb97aa0dd669.dll windows:4 windows x86 arch:x86
8dc04edfabe4cb9b5337e4d10fdd8f4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FindClose
FindFirstFileA
SystemTimeToFileTime
GetSystemTime
GetProfileStringA
LoadLibraryA
FreeLibrary
GlobalMemoryStatus
GetSystemDirectoryA
GetFileAttributesA
CreateDirectoryA
MultiByteToWideChar
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
GetLastError
GetModuleFileNameA
IsValidCodePage
Sleep
SetProcessAffinityMask
GetProcessAffinityMask
GetCurrentProcess
CreateThread
CloseHandle
TerminateThread
CreateEventA
SetEvent
WaitForSingleObject
WaitForMultipleObjects
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetVersionExA
GetACP
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime
user32
wsprintfA
LoadStringA
gdi32
GetICMProfileA
DeleteDC
CreateDCA
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
RegQueryValueExA
shell32
SHGetFolderPathA
ole32
CoCreateInstance
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcr80
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
strcmp
strlen
malloc
free
_purecall
_gmtime64
_time64
strncmp
sprintf
strcpy
pow
fabs
??0exception@std@@QAE@ABQBD@Z
strncpy
??_V@YAXPAX@Z
_invalid_parameter_noinfo
??2@YAPAXI@Z
strrchr
tolower
qsort
log
strcat
??0exception@std@@QAE@ABQBDH@Z
fclose
ftell
fseek
fread
fwrite
remove
rename
_strupr
sqrt
strncat
memcmp
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
memset
fopen
memcpy
_CxxThrowException
Exports
Exports
ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACETerminate
Sections
.text Size: 469KB - Virtual size: 469KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE