Static task
static1
Behavioral task
behavioral1
Sample
launcher.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
launcher.exe
Resource
win10v2004-20230703-en
General
-
Target
launcher.exe
-
Size
1.8MB
-
MD5
a5532d34617f898404909f6d6d5b9d4f
-
SHA1
24e1fae0dd38e48d03b49d75efc7ade1b4b39062
-
SHA256
569aa4a48e75c00434e3b32c609fb539b765b8c3fcb65ea4a44a407535149ff1
-
SHA512
e09bb38d5d3443fe9ebacc40947df7c53a240e9b5284946e5a6a28a5211b2ac6170e0aef94b4e15a6c55caa49e37bee063c2584015891f44a7969d98d9f56431
-
SSDEEP
49152:iTfGhTngrOJjQmUHN3T1r+KGYmBGXAF3H:4RJ1F+KG7GQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource launcher.exe
Files
-
launcher.exe.exe windows x86
825b753559edc55acfd5a01592bbca3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
MultiByteToWideChar
LCMapStringA
IsBadReadPtr
VirtualQuery
InterlockedExchange
LoadLibraryA
FlushFileBuffers
SetStdHandle
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
CreateMutexA
GetLastError
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentDirectoryA
ReleaseMutex
CloseHandle
GetSystemDefaultLangID
FindResourceA
LoadResource
IsBadCodePtr
LockResource
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
GetStringTypeW
user32
FindWindowA
PeekMessageA
TranslateMessage
DispatchMessageA
WaitMessage
SetForegroundWindow
UnregisterClassA
LoadImageA
LoadCursorA
RegisterClassExA
BeginPaint
DefWindowProcA
InvalidateRect
PostQuitMessage
GetSystemMetrics
CreateWindowExA
ShowWindow
UpdateWindow
MessageBoxA
wsprintfA
GetDC
ReleaseDC
EndPaint
gdi32
BitBlt
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
StretchDIBits
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
ShellExecuteA
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ