AC_64[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

AC_64.exe
Size

124.9MB
MD5

613d62bb210f96eea0f61e05d085a912
SHA1

8336be14f2b31b166dce68af798b497385f03ab6
SHA256

fcb61318101f39dd35362a03122d14a5f602c7d8a3ca3414ae794b143f846a77
SHA512

603bacd04c6ffdbbee1ed354255d1155258dae0d9df2eada732b0cf6a4c7e6b01de76a184f31ae0b6a8d1478679959c329a25ab157a23d06f98c65af7a84e06a
SSDEEP

1572864:AxQdhST+eNZs4uLTmUNh5CSpGo4a1AQaQe5GTWi435kbpTkIkvVjvlpHJlNFE4dD:ms4uLTwU1Az5Li4STA99pplHvzsU9bW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AC_64.exe

Files

AC_64.exe
.exe windows x64

869f6ef4cb1015c3eb394dfcef185061

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

SetWindowPos
OffsetRect
CopyRect
GetWindowRect
GetDesktopWindow
GetParent
LoadIconW
RegisterClipboardFormatW
FindWindowW
GetWindowTextW
SendMessageTimeoutW
PostMessageW
wsprintfW
MessageBoxA
DialogBoxParamA
EndDialog
SetWindowTextW
GetDlgItem
DefDlgProcW
LoadIconA
LoadCursorA
RegisterClassW
SetDlgItemTextW
SendDlgItemMessageA
ExitWindowsEx
EnumWindows
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
GetWindowThreadProcessId
FindWindowA
MessageBoxW

advapi32

RegSetValueExA
LookupAccountSidW
ChangeServiceConfigW
CreateServiceW
DeleteService
StartServiceW
ControlService
QueryServiceConfigW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegRestoreKeyW
RegSaveKeyW
RegCreateKeyExW
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueExW
LookupAccountNameW
AllocateAndInitializeSid
FreeSid
GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

ole32

CoTaskMemFree
ReleaseStgMedium
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData

kernel32

FlsAlloc
HeapSize
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
SetHandleCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSetInformation
HeapCreate
LCMapStringW
SetEnvironmentVariableW
GetTimeZoneInformation
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
HeapReAlloc
WriteConsoleA
SetStdHandle
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEndOfFile
FreeEnvironmentStringsA
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
GetStartupInfoA
GetLastError
CreateFileW
SetFilePointer
WriteFile
ReadFile
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
CloseHandle
CreateFileA
CreateDirectoryA
GetLongPathNameW
ExitProcess
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
FindFirstFileW
GetShortPathNameA
GetModuleFileNameA
GetShortPathNameW
GetModuleFileNameW
GetCurrentProcessId
GetLongPathNameA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetTempPathA
GetWindowsDirectoryW
GetEnvironmentVariableW
GetTempPathW
GetTempFileNameA
GetFullPathNameW
GetFullPathNameA
GetModuleHandleA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap
GetEnvironmentStrings
GetConsoleOutputCP
DuplicateHandle
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetEnvironmentVariableA
SearchPathA
DeleteFileW
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
Sleep
GetMailslotInfo
CreateThread
CreateMailslotA
GetCommandLineW
CreateSemaphoreA
SizeofResource
LockResource
LoadResource
FindResourceA
SetConsoleTitleA
GetTickCount
GetConsoleTitleA
AllocConsole
LoadLibraryExA
CreateProcessW
SetCurrentDirectoryW
SetThreadPriority
SetCurrentDirectoryA
GetCurrentDirectoryA
GetVersionExA
LocalFree
LocalAlloc
GetModuleHandleW
LoadLibraryExW
LoadLibraryW
GetSystemDirectoryW
GetDriveTypeW
WaitForMultipleObjects
OpenProcess
GlobalMemoryStatus
FreeLibrary
GetDiskFreeSpaceExW
SetConsoleTitleW
GetConsoleTitleW
GlobalUnlock
GlobalLock
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
DisconnectNamedPipe
FlushFileBuffers
GetCurrentThread
CreateDirectoryW
GetTempFileNameW
CreateSemaphoreW
RemoveDirectoryW
MoveFileExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
WriteConsoleW
GetFileType
GetStdHandle
DebugBreak
GetCommandLineA

Exports

Exports

Java_com_install4j_runtime_installer_platform_win32_ACLHandling_addACE
Java_com_install4j_runtime_installer_platform_win32_FileVersion_compare0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getDownloadsDirectory0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getDriveType0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getPathFromRegistry0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getShortPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSpecialFolder0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSystemDirectory0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getUniversalPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getWindowsDirectory0
Java_com_install4j_runtime_installer_platform_win32_Misc_broadcastSettingChange0
Java_com_install4j_runtime_installer_platform_win32_Misc_getEnvVarPairs0
Java_com_install4j_runtime_installer_platform_win32_Misc_getFreeDiskSpace0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPhysicalMemory0
Java_com_install4j_runtime_installer_platform_win32_Misc_getRunningModules0
Java_com_install4j_runtime_installer_platform_win32_Misc_getWindowTitle0
Java_com_install4j_runtime_installer_platform_win32_Misc_launch0
Java_com_install4j_runtime_installer_platform_win32_Misc_moveWithDelayUntilReboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_reboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_terminateProcesses0
Java_com_install4j_runtime_installer_platform_win32_Misc_toFront0
Java_com_install4j_runtime_installer_platform_win32_ObjectPicker_show0
Java_com_install4j_runtime_installer_platform_win32_Registry_changeNotifyAssociations0
Java_com_install4j_runtime_installer_platform_win32_Registry_createKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumSubKeys0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumValues0
Java_com_install4j_runtime_installer_platform_win32_Registry_getValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_keyExists0
Java_com_install4j_runtime_installer_platform_win32_Registry_restoreKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_saveKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_setValue0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_changeNotify0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_create0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_createWide0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_initialize0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_uninitialize
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_displayDialog0
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_initialize0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_show0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_closeHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectClient0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_createListener0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_disconnectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getCurrentProcessId0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getInvalidHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_isProcessAlive0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_readDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_writeDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_changeServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getServiceBinary0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getStartType0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_installService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_queryStatus0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setRestartServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_startService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_stopService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_uninstallService0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_addUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteLocalGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_executeElevated0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getAccountName0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getElevationType0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserProfileDirectory0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserSid0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_isMemberOfGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_setLsaAccountRight0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getHwnd0
registerNatives

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

869f6ef4cb1015c3eb394dfcef185061

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 261KB - Virtual size: 260KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 9KB - Virtual size: 96KB

.pdata Size: 11KB - Virtual size: 10KB

.rsrc Size: 368KB - Virtual size: 368KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 261KB - Virtual size: 260KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 9KB - Virtual size: 96KB

.pdata
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 368KB - Virtual size: 368KB

.reloc
Size: 2KB - Virtual size: 2KB