acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe
Size 6.6MB
Sample261030-a48d6sch68
SHA256 f740f37618d797670074dccd09e676b6e6ef81987ca8db4ae7fd16f411882c2a
MD5 e9e409ba6eb7cdd00642f1318109c459
SHA1 6a5d4446ee23ddc32cc68534dc03390ae8c83768
SHA512 2ca384a94b22ffa8ec93d197f0f54e20b3f08f4d00d124d6323877ad4ea0826c84e53c6b8dbc6fd471a562ac37da57cf45b39ef0b8c6fcd1002ec62830c389c6
SSDEEP 98304:h7woMEtOpdYVGDwL01hpy+iIoIAMRFEJnMwiiTZ:h7woMEtO4VGDQ00+Lo4RKJnMSZ
TLSH
T1A3663ADF7AF01895D123CA78995C87C6FE2A3448076C56BB49C098D639DAEE81F38137
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe

File Explorer

acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe

.exe 6.6MB

acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe

IMPHASH e881e690de79823b6f51e6de05d03715
SHA256 f740f37618d797670074dccd09e676b6e6ef81987ca8db4ae7fd16f411882c2a
MD5 e9e409ba6eb7cdd00642f1318109c459
SHA1 6a5d4446ee23ddc32cc68534dc03390ae8c83768
SHA512 2ca384a94b22ffa8ec93d197f0f54e20b3f08f4d00d124d6323877ad4ea0826c84e53c6b8dbc6fd471a562ac37da57cf45b39ef0b8c6fcd1002ec62830c389c6
SSDEEP 98304:h7woMEtOpdYVGDwL01hpy+iIoIAMRFEJnMwiiTZ:h7woMEtO4VGDQ00+Lo4RKJnMSZ
TLSH
T1A3663ADF7AF01895D123CA78995C87C6FE2A3448076C56BB49C098D639DAEE81F38137
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

37:17:cb:52:ef:c6:d4:81:f1:c6:d4:ab:b9:fc:df:5e:a8:0a:da:50:b1:bf:69:dc:24:fb:4c:59:61:9c:a3:1c

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=AimCore Native Public Signing 2026

Chains

Oct 26, 2026

CN=AimCore Native Public Signing 2026

Minor OS version

Major OS version

Entry point

1191936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

tdh

TdhGetProperty TdhGetPropertySize

winhttp

WinHttpSendRequest WinHttpReceiveResponse WinHttpCloseHandle WinHttpGetDefaultProxyConfiguration WinHttpOpen WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpGetIEProxyConfigForCurrentUser WinHttpQueryHeaders WinHttpSetTimeouts WinHttpSetStatusCallback WinHttpQueryOption WinHttpConnect WinHttpCrackUrl WinHttpQueryDataAvailable

iphlpapi

FreeMibTable GetBestRoute2 GetIpForwardTable2 GetAdaptersAddresses

crypt32

CryptProtectData CryptUnprotectData CertGetNameStringW CertFindCertificateInStore CryptImportPublicKeyInfoEx2 CryptHashCertificate2 CryptEncodeObjectEx CryptMsgGetParam CertCloseStore CryptQueryObject CryptBinaryToStringA CryptStringToBinaryA CertFreeCertificateContext CryptMsgClose CryptDecodeObjectEx

wintrust

CryptCATAdminCalcHashFromFileHandle2 CryptCATAdminReleaseContext CryptCATAdminReleaseCatalogContext CryptCATAdminAcquireContext2 CryptCATCatalogInfoFromContext WinVerifyTrust WTHelperProvDataFromStateData WTHelperGetProvSignerFromChain CryptCATAdminEnumCatalogFromHash

shell32

ShellExecuteExW SHGetKnownFolderPath CommandLineToArgvW

ole32

CoCreateGuid StringFromGUID2 CreateStreamOnHGlobal CoTaskMemFree

advapi32

GetSidSubAuthority OpenProcessToken CreateRestrictedToken FreeSid StartServiceW EnumServicesStatusExW InitializeSecurityDescriptor StartTraceW ProcessTrace CloseTrace ControlTraceW OpenTraceW LookupPrivilegeValueW SetSecurityDescriptorDacl AdjustTokenPrivileges GetSecurityDescriptorDacl RegCloseKey SetFileSecurityW CryptAcquireContextW GetAclInformation GetAce EqualSid CloseServiceHandle OpenSCManagerW SetTokenInformation InitializeAcl RegOpenKeyExW RegGetValueW CreateProcessAsUserW ConvertSidToStringSidW GetKernelObjectSecurity OpenServiceW ConvertStringSecurityDescriptorToSecurityDescriptorW SetKernelObjectSecurity AddAccessAllowedAceEx GetLengthSid CryptGetHashParam IsValidAcl GetSecurityDescriptorLength QueryServiceStatusEx RegEnumValueW GetSidSubAuthorityCount AllocateAndInitializeSid CryptDestroyHash LookupPrivilegeNameW CreateWellKnownSid RegCreateKeyExW GetSecurityDescriptorControl ConvertStringSidToSidW IsWellKnownSid ControlService RegQueryValueExW GetSecurityInfo CryptReleaseContext CreateProcessWithTokenW CryptCreateHash CryptHashData IsValidSid RegSetValueExW IsValidSecurityDescriptor GetTokenInformation

msi

ord88 ord141 ord169

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

kernel32

RtlPcToFileHeader GetConsoleOutputCP GetConsoleMode FlsAlloc GetStdHandle FlsSetValue FlsFree VirtualProtect GetDateFormatW FreeLibraryAndExitThread ExitThread FlsGetValue TlsFree GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwindEx InitializeSListHead CreateDirectoryW GetSystemFirmwareTable ReadFile SizeofResource GetVolumeInformationW CompareFileTime GetFileSizeEx HeapFree SetLastError SetDefaultDllDirectories GetCommandLineW GetCurrentProcess WriteFile GetModuleHandleExW DeviceIoControl TerminateProcess RemoveDirectoryW GetFinalPathNameByHandleW SetFileTime GetModuleFileNameW CreateNamedPipeW SetEnvironmentVariableW GetProcessId GetNamedPipeClientProcessId CreatePipe SetErrorMode GetEnvironmentVariableW SetEndOfFile GetTempPathW CreateMutexW WaitForSingleObject GetEnvironmentStringsW GetFileAttributesW ReleaseMutex GetSystemDirectoryW ResumeThread DuplicateHandle DisconnectNamedPipe OpenProcess SetProcessMitigationPolicy SetFileAttributesW CreateToolhelp32Snapshot CreateEventW MultiByteToWideChar GetSystemWow64DirectoryW Sleep GetFileInformationByHandle FormatMessageW GetTickCount64 GetLastError GetFileAttributesExW Process32NextW SetFileInformationByHandle OutputDebugStringW SetEvent GetDiskFreeSpaceExW TerminateThread LockResource GlobalAlloc DeleteFileW Process32FirstW GlobalFree CloseHandle GetNativeSystemInfo GetSystemInfo CancelIoEx HeapSetInformation ResetEvent LoadResource FindResourceW HeapAlloc Module32FirstW GetLocalTime GetCurrentDirectoryW GetOverlappedResult SwitchToThread GetNamedPipeServerProcessId GetWindowsDirectoryW GetProcAddress GlobalLock SetFilePointerEx LocalFree MoveFileExW ExitProcess GetCurrentProcessId GetProcessHeap SystemTimeToFileTime GlobalMemoryStatusEx CreateProcessW GetModuleHandleW FreeLibrary CopyFileW WideCharToMultiByte GetProcessInformation Module32NextW QueryFullProcessImageNameW GetSystemTimeAsFileTime GetFileType GetSystemTime SetThreadErrorMode K32GetMappedFileNameW WaitNamedPipeW GlobalUnlock VirtualQuery IsWow64Process GetProcessTimes LoadLibraryExW IsDebuggerPresent ConnectNamedPipe CheckRemoteDebuggerPresent SetUnhandledExceptionFilter FlushFileBuffers GetExitCodeProcess FindFirstFileW FindNextFileW FindClose OutputDebugStringA OpenJobObjectW OpenEventW OpenFileMappingW UnmapViewOfFile IsProcessInJob FlushViewOfFile CreateThread TerminateJobObject CreateFileMappingW MapViewOfFile QueryDosDeviceW GetLogicalDriveStringsW CreateMutexExW GetDriveTypeW RaiseException WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread IsProcessorFeaturePresent FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork FindFirstFileExW GetFullPathNameW AreFileApisANSI GetFileInformationByHandleEx FormatMessageA GetLocaleInfoEx QueryPerformanceCounter QueryPerformanceFrequency InitOnceComplete InitOnceBeginInitialize GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeCriticalSectionEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext GetStartupInfoW FreeEnvironmentStringsW SetStdHandle HeapSize WriteConsoleW CreateFileW RtlUnwind UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry

user32

PostMessageW GetWindowRect DestroyWindow IsWindowVisible MessageBoxW MonitorFromWindow SetWindowLongPtrW CreateWindowExW ScreenToClient SendMessageW SetWindowTextW GetWindowLongPtrW ShowWindow IsWindow OpenClipboard DispatchMessageW SetTimer DestroyIcon GetMonitorInfoW CloseClipboard EmptyClipboard PeekMessageW DefWindowProcW GetForegroundWindow EnumWindows TranslateMessage LoadIconW EnumDisplayDevicesW LoadCursorW GetClassNameW SetClipboardData SetCursor GetClientRect UpdateLayeredWindow KillTimer PostQuitMessage SystemParametersInfoW PtInRect UpdateWindow SetForegroundWindow InvalidateRect GetAncestor GetCursorPos BeginPaint EndPaint RegisterClassExW GetKeyState GetMessageW GetWindowThreadProcessId GetWindowTextW RegisterRawInputDevices GetRawInputData RegisterHotKey RegisterClassW UnregisterHotKey

gdi32

DeleteObject DeleteDC CreateCompatibleDC CreateDIBSection SelectObject

bcrypt

BCryptDestroyKey BCryptVerifySignature BCryptOpenAlgorithmProvider BCryptGenRandom BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHash BCryptHashData BCryptCreateHash BCryptFinalizeKeyPair BCryptGenerateKeyPair BCryptExportKey BCryptSignHash BCryptGetProperty

wevtapi

EvtRender EvtNext EvtClose EvtQuery

ncrypt

NCryptExportKey NCryptFinalizeKey NCryptDeleteKey NCryptOpenStorageProvider NCryptOpenKey NCryptVerifySignature NCryptCreatePersistedKey NCryptFreeObject NCryptSignHash NCryptSetProperty

gdiplus

GdipCreateBitmapFromHICON GdipDeleteGraphics GdipDrawArc GdipDeleteStringFormat GdipDeleteFont GdipFillPath GdipDeletePen GdipCreateBitmapFromScan0 GdipCreatePen1 GdipSetStringFormatAlign GdipSetStringFormatFlags GdipSetStringFormatTrimming GdipSetSmoothingMode GdipGetImageGraphicsContext GdipSetInterpolationMode GdipCreateFont GdipSetStringFormatLineAlign GdipCreatePath GdipFlush GdipCreateHICONFromBitmap GdiplusStartup GdiplusShutdown GdipAddPathLine GdipCreateStringFormat GdipDeleteFontFamily GdipGetImageHeight GdipSetImageAttributesColorMatrix GdipAddPathArc GdipCloneBrush GdipDrawEllipse GdipSetPenEndCap GdipFillEllipse GdipDrawString GdipDrawPath GdipFree GdipGetGenericFontFamilySansSerif GdipCreateImageAttributes GdipClosePathFigure GdipSetPixelOffsetMode GdipDrawLine GdipCloneBitmapAreaI GdipCreateSolidFill GdipGraphicsClear GdipSetCompositingQuality GdipCreateFontFamilyFromName GdipDrawImageRectRect GdipDrawImageRect GdipCloneImage GdipSetPenStartCap GdipDeleteBrush GdipCreateBitmapFromStream GdipAlloc GdipAddPathBezier GdipDisposeImageAttributes GdipDeletePath GdipDisposeImage GdipGetImageWidth

rasapi32

RasGetConnectStatusW RasEnumConnectionsW

cfgmgr32

CM_Get_Device_ID_List_SizeW CM_Get_Device_ID_ListW

setupapi

SetupGetInfDriverStoreLocationW

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

397KB

Virtual Size

397KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

626KB

Virtual Size

636KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rtdat

Size

256KB

Virtual Size

576KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rtcod

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ehs

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ehx

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rtreloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

acai-Beta-inst_RE3pmUi2oDrVzsIZGOGojA_V.exe

PE Signature issue

tdh

winhttp

iphlpapi

crypt32

wintrust

shell32

ole32

advapi32

msi

version

kernel32

user32

gdi32

bcrypt

wevtapi

ncrypt

gdiplus

rasapi32

cfgmgr32

setupapi

generic