Static task
static1
Behavioral task
behavioral1
Sample
ALMV Launcher.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ALMV Launcher.exe
Resource
win10v2004-20221111-en
General
-
Target
ALMV Launcher.exe
-
Size
1.1MB
-
MD5
188e26b295d7e704e40d1fbb5cfa0b40
-
SHA1
f57849121dd5e36e0c830e5e680d4952bb62f539
-
SHA256
6833154bd4b0fa9e97dfcb40c45fc9b594d33c2de9287762589da825fbb31d30
-
SHA512
8bcd7899f9c7d4c6e325a8cbf89cba4158364cef68a02c8eb8520da53a2f9e1cfa9a707515bb9cf924b9b8b7b1e314c1a3c01154f18a99ebbea5a5def237ea13
-
SSDEEP
12288:7TFXGNy0issp5HNisIMCpzXoeU7WS86Og5MGdaUjbIh9/sWr:fxbssp5H1IMCpTo+KX
Malware Config
Signatures
Files
-
ALMV Launcher.exe.exe windows x86
27d726a66b38a38b3a4408347ab34ed7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProcessMemory
HeapFree
TerminateProcess
Wow64SetThreadContext
Wow64GetThreadContext
ResumeThread
Sleep
GetSystemDirectoryA
CloseHandle
VirtualAllocEx
ReadProcessMemory
GetProcessHeap
GetConsoleWindow
CreateProcessA
IsWow64Process
CreateFileW
SetStdHandle
SetEnvironmentVariableW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetFileType
OutputDebugStringW
WriteConsoleW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapReAlloc
HeapSize
HeapQueryInformation
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
user32
ShowWindow
Sections
.text Size: 321KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 504KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ