aimware[.]dll | Triage™

Resubmissions

20/06/2026, 02:29

260620-cy141sd14v3

07/02/2025, 15:08

250207-sh44qsvrgv

21/12/2024, 21:53

241221-1r1fxa1jb13

Sharing

Copy URL Twitter E-mail

General

Target
aimware.dll
Size 12.8MB
Sample260620-cy141sd14v
SHA256 4895eac0f826dcb7c0f16193486f3a68397112eab16cd04931ae9ff67149d744
MD5 7b1bf0c4573128a070d57752fdc043d2
SHA1 20e5e64edc6216fec4db1c6c7f8884d9413801a3
SHA512 9541545c8a373b4db716238bf136f1925ae89d59abcf45a052db8134280482c2692957de7841e5d7afdf0a9c856d9f156f5f0a0c5649afa433499855273d7309
SSDEEP 393216:FqE2N5tqn6KguE89ZQIwO5nMHbuPPcErNH:AEokLgX8/QI3pT0qN
TLSH
T155D6129BB7B911E9C8ABC178C20B4A4BF5E1340E89745EDF15D509C23FB3E116A5E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aimware.dll

File Explorer

aimware.dll

.dll 12.8MB

aimware.dll

IMPHASH c4b529747fdff766b3b60f9d0b02663d
SHA256 4895eac0f826dcb7c0f16193486f3a68397112eab16cd04931ae9ff67149d744
MD5 7b1bf0c4573128a070d57752fdc043d2
SHA1 20e5e64edc6216fec4db1c6c7f8884d9413801a3
SHA512 9541545c8a373b4db716238bf136f1925ae89d59abcf45a052db8134280482c2692957de7841e5d7afdf0a9c856d9f156f5f0a0c5649afa433499855273d7309
SSDEEP 393216:FqE2N5tqn6KguE89ZQIwO5nMHbuPPcErNH:AEokLgX8/QI3pT0qN
TLSH
T155D6129BB7B911E9C8ABC178C20B4A4BF5E1340E89745EDF15D509C23FB3E116A5E322
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

229996

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualFree VirtualAlloc GetSystemInfo VirtualQuery HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep GetLastError HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetProcAddress GetCurrentProcessId GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread AllocConsole SetConsoleTitleA LoadLibraryA Beep CreateFileA AddVectoredExceptionHandler CreateThread GetModuleHandleA LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte EnterCriticalSection

user32

MessageBoxA

msvcp140

?_Xbad_alloc@std@@YAXXZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ??Bid@locale@std@@QEAA_KXZ ?id@?$numpunct@D@std@@2V0locale@2@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0facet@locale@std@@IEAA@_K@Z ??1facet@locale@std@@MEAA@XZ ?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ??0_Lockit@std@@QEAA@H@Z ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Lockit@std@@QEAA@XZ ??1_Locinfo@std@@QEAA@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

dbghelp

MiniDumpWriteDump

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __C_specific_handler __std_terminate __std_exception_copy memcpy memmove memset __std_exception_destroy __std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

free calloc _callnewh malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __acrt_iob_func freopen_s

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table terminate _initterm_e _register_onexit_function _execute_onexit_table _crt_atexit _initterm _cexit _invalid_parameter_noinfo_noreturn

api-ms-win-crt-string-l1-1-0

toupper

api-ms-win-crt-math-l1-1-0

_dsign _ldsign _fdsign _ldclass _dclass ceilf _fdclass

api-ms-win-crt-time-l1-1-0

_localtime64_s strftime _time64

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func