PremiumLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PremiumLauncher.exe
Size

60KB
MD5

0d05254eb4feaebab8b9c26bb87ea9c4
SHA1

30ae2429bb3582b42e77382bab92ca6cde1630d5
SHA256

553cf40a61e5f452905b37c0fc0d022252f4a7a5b300a68cd4a04ff917b0c7ee
SHA512

755b733c5fed668b738ec75025df69d9be25556b1c8ff0815f1926d8eb9928980f9d32aa1f41ce4cd10b606d7c6f81325579ad0b383208a99546769041e598f8
SSDEEP

192:KuUut2NZosz2ClHDukGkqzY9O1FDrzo3L9Ere5t8Q4I/OYXIdo:pt2njz2EHDxGkgY9OjDrzWt8j44o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PremiumLauncher.exe

Files

PremiumLauncher.exe
.exe windows x86

Password: 1001

699cc9570c233cf12692f95447a4cdc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellExecuteA

msvcrt

__argc
__argv
_environ
_XcptFilter
memset
__set_app_type
_controlfp
__getmainargs
exit

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ