Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Launcher.exe
Size

685.0MB
MD5

b4633968088a72a6dd43cb0278e7b125
SHA1

9d14e06ef318536c280e3d610fc113ef9f178889
SHA256

da4253d9ff52e6c305f6630045246da0f207bb11a4dfef10e3ae84d60005a3c1
SHA512

991ca5cb2a3e400fb2cd0946926613aebb3808286bed5174c829a97ee302c6a00bc127e3a6b354e0578d8f871762fbd1d36fd6d43277ebd83bf7715711824c0d
SSDEEP

49152:FK6fT7rhx+7r9O3iUqVgRI3ytMT+yZlsfXH:F3bKwyUNCTVZlcH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Launcher.exe

Files

Launcher.exe
.exe windows x64

d75116b68202e298728ec70552120ba0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strcpy_s
memset
strcat_s
malloc
strncpy
memmove
fopen
fwrite
fclose
strstr
strrchr
strcat
fgetc
fputc
rand
_getcwd
strncat
sprintf
getenv
_itoa
strcmp
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

kernel32

CreatePipe
SetHandleInformation
GetStdHandle
CreateProcessA
CloseHandle
ReadFile
WaitForSingleObject
GetExitCodeProcess
GetWindowsDirectoryA
GetLocaleInfoA
GetModuleFileNameA
CopyFileA
GetCurrentProcessId
ExitProcess

user32

MessageBoxA

shell32

ShellExecuteExA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ