LaunchWinApp[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

LaunchWinApp.exe
Size

33KB
MD5

384cb45360f43279f6951dbacc71ea95
SHA1

2fc06d8181157b7b4f0b886f17b4630b6e8ef2de
SHA256

4de670772e2f1e1e83434a3c07af7a853c4e45ec05da13a727bfaf2f98cbbf7c
SHA512

8c04169fb89573ff1b043f78b9c666b96cf9a819bfa75cffeb27397d8b434d8f3218d5a6c3d933f5c9a338fc01e521f75a8b3e520aa6b7a77d7f178f079cee10
SSDEEP

768:gf2Ql8OY3CGqZ63zHXT6ASy3s+ovVAtVJGBJB:w2QaOHGqK4y3sBuJGBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LaunchWinApp.exe

Files

LaunchWinApp.exe
.exe windows x86

698210cfc3040ec86ebb9c7973cd7380

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

EventSetInformation
EventRegister
EventWriteTransfer
EventUnregister

kernel32

GetModuleFileNameA
InitOnceBeginInitialize
CreateSemaphoreExW
HeapFree
SetLastError
GetCommandLineW
GetCurrentProcess
ReleaseSemaphore
GetModuleHandleExW
K32GetModuleFileNameExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
K32EnumProcessModulesEx
OpenProcess
FormatMessageW
GetLastError
OutputDebugStringW
InitOnceComplete
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
LocalFree
GetCurrentProcessId
GetProcessHeap
LoadLibraryExW

msvcrt

_onexit
__dllonexit
??1exception@@UAE@XZ
_unlock
??1type_info@@UAE@XZ
_controlfp
_lock
?terminate@@YAXXZ
??3@YAXPAX@Z
__CxxFrameHandler3
_wcmdln
_initterm
__p__fmode
_cexit
_exit
_purecall
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
memcpy_s
_XcptFilter
malloc
free
_vsnprintf_s
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
__setusermatherr
_except_handler4_common
memcpy
_CxxThrowException
_vsnwprintf
exit
_callnewh
memmove
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABQBDH@Z
?what@exception@@UBEPBDXZ
memset

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindExtensionW

api-ms-win-core-com-l1-1-1

CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoInitialize

oleaut32

SysFreeString

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
GetStartupInfoW

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleA

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

iertutil

CreateUri

ntdll

NtQueryInformationProcess

shell32

CommandLineToArgvW
ShellExecuteExW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

698210cfc3040ec86ebb9c7973cd7380

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

api-ms-win-core-shlwapi-legacy-l1-1-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-winrt-l1-1-0

oleaut32

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

iertutil

ntdll

shell32

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB