gurcu | Evolion Launcher[.]exe

General

Target
Evolion Launcher.exe
Size 1.4MB
Sample230706-vaycbsec7x
SHA256 e85101062f748f61e87f91bac8abcaa11b5754fb364b8e99cc67b9e7f0283edc
MD5 ebdda35a64fdd77737a3ec887c3c63b9
SHA1 22bed885d16c61ee24a42a704ec1b1174dc1eccb
SHA512 e3cf15ede970349d1f35f3334c4d2bf4c6bf2c9664a704405b22a7f315637942bba64dacff86875343f294891033295666421791b43ff371035ca24d3dbebb0e
SSDEEP 24576:hYVeGFNjhp+qJBzrYW9pivo5gG3xIFzADL78rFtNxm1R+H2AkfhwXlCt:hElNf+qn/9pLV8zi7qFHxmn+tia
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

gurcu

Malware Config

Signatures

Gurcu family
gurcu

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Evolion Launcher.exe

File Explorer

Evolion Launcher.exe

.exe 1.4MB

Evolion Launcher.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e85101062f748f61e87f91bac8abcaa11b5754fb364b8e99cc67b9e7f0283edc
MD5 ebdda35a64fdd77737a3ec887c3c63b9
SHA1 22bed885d16c61ee24a42a704ec1b1174dc1eccb
SHA512 e3cf15ede970349d1f35f3334c4d2bf4c6bf2c9664a704405b22a7f315637942bba64dacff86875343f294891033295666421791b43ff371035ca24d3dbebb0e
SSDEEP 24576:hYVeGFNjhp+qJBzrYW9pivo5gG3xIFzADL78rFtNxm1R+H2AkfhwXlCt:hElNf+qn/9pLV8zi7qFHxmn+tia
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1419246

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Evolion Launcher.exe

mscoree