launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

launcher.exe
Size

1.2MB
MD5

690068603739d158671fd112693f66df
SHA1

22c78ab910772b05dfe0ce5ae506955413dd2f1c
SHA256

0d50d7b2fa8b5f87c1548c359adc564ae036797c2f8a47c8a0d70d25c01723ca
SHA512

baf8d27ab72e76d01839ff57ab2698deab5310365af697191b0dddd26bfd8665b5f05de92dd1576b486ac6371a17aa1c4b0e7aab14a0c7b779b0aad7c54308c3
SSDEEP

24576:DT/7TBHNYOVksl3ze4g+WWv4CxLjb8RUitbw:DrHBHNYCe4g+WHCx3bRWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
launcher.exe

Files

launcher.exe
.exe windows x64

9b1bc1fa583ebc1132beea2c02f7f840

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ole32

CoInitializeEx
CoUninitialize

winpixeventruntime

PIXEventsReplaceBlock
PIXGetThreadInfo

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW
AvSetMmThreadPriority

ntdll

NtQuerySystemInformation
RtlUnwindEx
RtlPcToFileHeader
RtlUnwind

winmm

timeBeginPeriod
timeEndPeriod

kernel32

GetConsoleMode
CreateFileW
WriteConsoleW
HeapSize
HeapReAlloc
RtlCaptureContext
GetConsoleOutputCP
ReadConsoleW
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
CloseHandle
CreateProcessA
OutputDebugStringW
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
RaiseException
WaitForSingleObject
Sleep
SwitchToThread
GetCurrentThread
SetThreadPriority
SuspendThread
ResumeThread
GetThreadId
SetThreadDescription
GetProcessAffinityMask
SwitchToFiber
DeleteFiber
ConvertFiberToThread
CreateFiberEx
ConvertThreadToFiber
SetThreadAffinityMask
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventExW
PulseEvent
VirtualAlloc
VirtualFree
IsDebuggerPresent
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
FormatMessageA
SetWaitableTimer
CreateWaitableTimerExW
WaitForMultipleObjects
CreateWaitableTimerW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
SetConsoleCtrlHandler
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
InitializeSListHead
GetStartupInfoW
GetProcessHeap
GetStringTypeW
SetStdHandle
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
MultiByteToWideChar
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
ReadFile

Sections

.text
Size: 709KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b1bc1fa583ebc1132beea2c02f7f840

Headers

DLL Characteristics

File Characteristics

Imports

ole32

winpixeventruntime

avrt

ntdll

winmm

kernel32

Sections

.text Size: 709KB - Virtual size: 709KB

.rdata Size: 198KB - Virtual size: 197KB

.data Size: 9KB - Virtual size: 696KB

.pdata Size: 34KB - Virtual size: 33KB

.idata Size: 7KB - Virtual size: 6KB

.tls Size: 1024B - Virtual size: 904B

.00cfg Size: 512B - Virtual size: 337B

_RDATA Size: 1024B - Virtual size: 562B

.rsrc Size: 296KB - Virtual size: 296KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 709KB - Virtual size: 709KB

.rdata
Size: 198KB - Virtual size: 197KB

.data
Size: 9KB - Virtual size: 696KB

.pdata
Size: 34KB - Virtual size: 33KB

.idata
Size: 7KB - Virtual size: 6KB

.tls
Size: 1024B - Virtual size: 904B

.00cfg
Size: 512B - Virtual size: 337B

_RDATA
Size: 1024B - Virtual size: 562B

.rsrc
Size: 296KB - Virtual size: 296KB

.reloc
Size: 9KB - Virtual size: 9KB