VLauncher[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

VLauncher.exe
Size

39.4MB
MD5

bf9bfbf49335037aeede6416c4bdecce
SHA1

1d0e0051bced999c4f44fd1e3481af2cd972fc90
SHA256

7e5296fe1e1ac15e1240fb9b455fde16a4d46e2e4ae5c52061b91994a7988b21
SHA512

19fbc7d006e937feac2cfba6345d82c62125a0bdf97874add4d8fb55a7d283d47777ad70a36a34f651db546f6aab68f3fcffb52142a04b86c04315e679ebe4e0
SSDEEP

786432:P2L20eJQFpXZrBqvueV68RDfn8ZtkW9eZlj9hwXhSqfYMjzsYGr9k+WDnS4Va:P2LUJQFpNBijJ8ZtkW4j9hwQDMjwBkTN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VLauncher.exe

Files

VLauncher.exe
.exe windows x64

Password: 123

2028ff8c6b2700a3d267d31b7a294f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
Sleep
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
CreateFileW
CloseHandle
WaitForSingleObject
CreateProcessW
WideCharToMultiByte
GetFileAttributesA

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_cexit
_invalid_parameter_noinfo_noreturn
_crt_at_quick_exit
abort
terminate
_seh_filter_dll
_configure_narrow_argv

vcruntime140

__std_exception_copy
_CxxThrowException
__C_specific_handler
__current_exception
__std_exception_destroy
memcpy
memmove
__FrameUnwindFilter
__current_exception_context
memset

msvcp140

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?_Xlength_error@std@@YAXPEBD@Z

winmm

PlaySoundA

user32

GetDC
GetDesktopWindow
GetSystemMetrics

gdi32

BitBlt

shell32

ShellExecuteW

api-ms-win-crt-utility-l1-1-0

rand

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 505KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38.8MB - Virtual size: 38.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123

2028ff8c6b2700a3d267d31b7a294f6b

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-heap-l1-1-0

kernel32

api-ms-win-crt-runtime-l1-1-0

vcruntime140

msvcp140

winmm

user32

gdi32

shell32

api-ms-win-crt-utility-l1-1-0

mscoree

Sections

.text Size: 27KB - Virtual size: 26KB

.nep Size: 3KB - Virtual size: 2KB

.rdata Size: 505KB - Virtual size: 504KB

.data Size: 3KB - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 468B

.rsrc Size: 38.8MB - Virtual size: 38.8MB

.reloc Size: 512B - Virtual size: 100B

.text
Size: 27KB - Virtual size: 26KB

.nep
Size: 3KB - Virtual size: 2KB

.rdata
Size: 505KB - Virtual size: 504KB

.data
Size: 3KB - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 468B

.rsrc
Size: 38.8MB - Virtual size: 38.8MB

.reloc
Size: 512B - Virtual size: 100B