Static task
static1
Behavioral task
behavioral1
Sample
MSCO Launcher.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MSCO Launcher.exe
Resource
win10v2004-20220812-en
General
-
Target
MSCO Launcher.exe
-
Size
317KB
-
MD5
7a8e37ec312f13a904501a714bf5a8e1
-
SHA1
73d0092710609c50420bb137e0c30f079a5242d4
-
SHA256
ab0aa4d28ddb3ab48db6415aa78c89e9544a04f557ef95bcedb8b8e855659b67
-
SHA512
c17b04d3fb3b9950405533bde4e125b694b48e54a02356b6fda74628150bdeafb49be642d2d1117ed31adb48838482aab2eae52b1d500292073041a6a1fcf9bf
-
SSDEEP
6144:YZzvhs2Z4n1E7g34XtVYAOfTdPPhXkgClU:YJ+2Z4nShVY5phpaU
Malware Config
Signatures
Files
-
MSCO Launcher.exe.exe windows x86
a99648a4d417f4130faca9d4625edb8e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
CreateProcessW
CreateFileW
CloseHandle
WideCharToMultiByte
GetLastError
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetFileType
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
SetFilePointerEx
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
WriteConsoleW
user32
AllowSetForegroundWindow
WaitForInputIdle
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ