Exaro Boosters Temp[.]exe

Resubmissions

07/11/2026, 11:19

261107-new7haef87

07/11/2026, 11:17

261107-ndwvcaxt5l6

Sharing

Copy URL Twitter E-mail

General

Target
Exaro Boosters Temp.exe
Size 15KB
Sample261107-ndwvcaxt5l
SHA256 4e87fa34fe7721981c4aa54ec412784e2ffdd7c250fea3ef2466f530016f92df
MD5 db33ded87c0354607469474b38f42e52
SHA1 b38acd05e6f60ff1e3619a0ab1d690b489a60f6e
SHA512 087d02a959cd386b346752649d57b65c3c9f3025b9f4fab9a84b359ffd9362c78480f8c3541b47a52d3c9fc842b19ac3661572115ae58870898999967287d07a
SSDEEP 192:XnzFdybdRFqm4yeuU3k5JSjweUc/IGCSp4ZaAws681slsQ5tfDo1:XnzXybZqCBUn5Uc/Pfsl
TLSH
T1E9622ACF7F9648EAC1A9C27180730616F231BD61076293CF93B6612C1FB96C43E6D659
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Exaro Boosters Temp.exe

File Explorer

Exaro Boosters Temp.exe

.exe 15KB

Exaro Boosters Temp.exe

IMPHASH 20b5d33271da5e3a6f0a3d7558ea42e1
SHA256 4e87fa34fe7721981c4aa54ec412784e2ffdd7c250fea3ef2466f530016f92df
MD5 db33ded87c0354607469474b38f42e52
SHA1 b38acd05e6f60ff1e3619a0ab1d690b489a60f6e
SHA512 087d02a959cd386b346752649d57b65c3c9f3025b9f4fab9a84b359ffd9362c78480f8c3541b47a52d3c9fc842b19ac3661572115ae58870898999967287d07a
SSDEEP 192:XnzFdybdRFqm4yeuU3k5JSjweUc/IGCSp4ZaAws681slsQ5tfDo1:XnzXybZqCBUn5Uc/Pfsl
TLSH
T1E9622ACF7F9648EAC1A9C27180730616F231BD61076293CF93B6612C1FB96C43E6D659
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\James\Documents\Exaro Free Temp\x64\Release\Exaro Boosters Temp.pdb

kernel32

SetConsoleTitleA Sleep RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlCaptureContext

user32

MessageBoxA

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ?good@ios_base@std@@QEBA_NXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler __std_terminate __current_exception_context memcpy memset __current_exception

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit terminate _cexit __p___argc _seh_filter_exe _c_exit _exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argv _set_app_type system exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vfprintf __p__commode __acrt_iob_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale