Acer_Loader[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Acer_Loader.exe
Size

51.1MB
MD5

59a0cad3efa33e8123cc9d9c3a7adb0a
SHA1

d2a6ce305b8282b4419a687444d5fa01449df716
SHA256

a16262d315ca165a6331e3d5a730e3e3c1981b4c92199bbcb99bd925d2a456b8
SHA512

eb17a6b8046bb5a1fd43d8aa9593b5ee23626cbaefd2917cbfa770aa73070cb1eda7f28dda5374a6c542afb9ac17ee0ebf1c27152f7057519ca0c1b668e53c63
SSDEEP

1572864:JXGO6Q3dGUxgooR5w+I/oBdasgnwswshtC:JWMDmuoBxNs3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Acer_Loader.exe

Files

Acer_Loader.exe
.exe windows:6 windows x64 arch:x64

ca04adc75d1b3627adf78fce93508803

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OutputDebugStringW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

SendMessageA

advapi32

CryptHashData

ole32

StringFromGUID2

msvcp140

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

ntdll

NtUnmapViewOfSection

dbghelp

SymSetOptions

urlmon

URLDownloadToFileA

shlwapi

PathRemoveFileSpecA

normaliz

IdnToAscii

wldap32

ord217

crypt32

CertCloseStore

ws2_32

socket

rpcrt4

UuidCreate

userenv

UnloadUserProfile

vcruntime140

strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe

api-ms-win-crt-string-l1-1-0

strpbrk

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_wremove

api-ms-win-crt-stdio-l1-1-0

_open

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

shell32

ShellExecuteA

Sections

��
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 51.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 51.1MB - Virtual size: 51.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca04adc75d1b3627adf78fce93508803

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcp140

ntdll

dbghelp

urlmon

shlwapi

normaliz

wldap32

crypt32

ws2_32

rpcrt4

userenv

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

shell32

Sections

�������� Size: - Virtual size: 3.0MB

�������� Size: - Virtual size: 407KB

�������� Size: - Virtual size: 16KB

�������� Size: - Virtual size: 23KB

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 114B

�������� Size: - Virtual size: 51.5MB

�������� Size: 5KB - Virtual size: 5KB

�������� Size: 51.1MB - Virtual size: 51.1MB

�������� Size: 512B - Virtual size: 480B

��
Size: - Virtual size: 3.0MB

��
Size: - Virtual size: 407KB

��
Size: - Virtual size: 16KB

��
Size: - Virtual size: 23KB

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 114B

��
Size: - Virtual size: 51.5MB

��
Size: 5KB - Virtual size: 5KB

��
Size: 51.1MB - Virtual size: 51.1MB

��
Size: 512B - Virtual size: 480B