Static task
static1
Behavioral task
behavioral1
Sample
EpicGamesLauncher_82605.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
EpicGamesLauncher_82605.exe
Resource
win10-20230703-en
Behavioral task
behavioral3
Sample
EpicGamesLauncher_82605.exe
Resource
win10v2004-20230703-en
General
-
Target
EpicGamesLauncher_82605.exe
-
Size
281.6MB
-
MD5
a88bd33fe4e3075eb89ccc3891d6ed0f
-
SHA1
e98df332346bf6680c4f71628ab80fc8b2f13bfb
-
SHA256
3331154dc7e5218c290a45b56440829918736e20ed421d11b082fd69e7eda621
-
SHA512
fa58e530c38bdc86647a95b9e5149637a67fe99525e90a435b6858c762a5d14ec57bbc2d1587a9164bd9c1392e9172895f50d0ba3813eadac05882f48f40ab89
-
SSDEEP
6291456:9yBL2nB59z1J6jkhizeoqpSBGw0OWGWeDqMyYVKsJR:9PnB59zyqXYZqM39R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EpicGamesLauncher_82605.exe
Files
-
EpicGamesLauncher_82605.exe.exe windows x86
27cb28d4b6190e9467012187f7b6a228
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
DispatchMessageW
SendMessageW
DefWindowProcW
PostQuitMessage
RegisterClassExW
CreateWindowExW
LoadIconW
LoadCursorW
SetWindowLongW
GetClientRect
EndPaint
BeginPaint
UpdateWindow
GetSystemMetrics
ShowWindow
GetMessageW
comctl32
InitCommonControlsEx
uxtheme
SetWindowTheme
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapSize
WriteConsoleW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryW
Sleep
CloseHandle
WaitForSingleObject
CreateMutexW
CreateThread
MultiByteToWideChar
WideCharToMultiByte
GetConsoleMode
CreateFileW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetEndOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
HeapReAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
gdi32
TextOutW
Sections
.text Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ