FossciPlayerLauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
FossciPlayerLauncher.exe
Size 802KB
Sample230912-vsja5aha27
SHA256 3a33b1fca9cff494647cabf7efd79d00190a710baa83c5e493417478847587b2
MD5 bd51a0e7831209de143d98903d24d654
SHA1 88a2b814eb7b171b0394c10f74bd9cf10befdaf9
SHA512 437be0689435a899d5a2508acc075cce4d09c5aa7a9d697d8ca80c8d4697d7d5a0e2ae510eda4b29d2a68cb83ed20d9f266a01451e9f97b944d535be501b2879
SSDEEP 24576:w/dWIGPuNImcNai7NtmknyN+TCWVZT7Hg:w/dUuNI7NaoTmxYTHXHg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FossciPlayerLauncher.exe

File Explorer

FossciPlayerLauncher.exe

.exe 802KB

FossciPlayerLauncher.exe

IMPHASH 73f9f543528e94c078c657db3c4cf7d1
SHA256 3a33b1fca9cff494647cabf7efd79d00190a710baa83c5e493417478847587b2
MD5 bd51a0e7831209de143d98903d24d654
SHA1 88a2b814eb7b171b0394c10f74bd9cf10befdaf9
SHA512 437be0689435a899d5a2508acc075cce4d09c5aa7a9d697d8ca80c8d4697d7d5a0e2ae510eda4b29d2a68cb83ed20d9f266a01451e9f97b944d535be501b2879
SSDEEP 24576:w/dWIGPuNImcNai7NtmknyN+TCWVZT7Hg:w/dUuNI7NaoTmxYTHXHg
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

300243

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection RaiseException DecodePointer CreateEventA WideCharToMultiByte MultiByteToWideChar DeleteFileW GetModuleHandleW OpenEventW CreateEventW CreateMutexW lstrcmpW CloseHandle WaitForSingleObject ReleaseMutex ResetEvent SetEvent InitializeCriticalSectionAndSpinCount GetLastError GetProcessHeap HeapSize WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP IsValidCodePage FindFirstFileExW SetEndOfFile SetStdHandle FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetConsoleCP ReadConsoleW GetConsoleMode GetACP GetStdHandle ExitProcess SetFilePointerEx GetFileType ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread HeapFree HeapReAlloc HeapAlloc GetCommandLineW GetCommandLineA LoadLibraryExW RtlUnwind InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW EncodePointer OutputDebugStringW HeapDestroy GetProcAddress LocalFree FormatMessageA LockResource FreeLibrary LoadResource SizeofResource LoadLibraryW FindResourceW FindResourceExW CreateDirectoryW CreateFileW GetFileAttributesW GetVersionExW GetCurrentThreadId FindClose FormatMessageW FindFirstFileW FindNextFileW CopyFileW GetSystemTime GetTempPathW WaitForSingleObjectEx VerSetConditionMask InterlockedIncrement InterlockedDecrement OpenProcess GetCurrentProcess TerminateProcess GetCurrentThread Sleep GetLocalTime CompareFileTime GetTickCount MapViewOfFile UnmapViewOfFile lstrlenW CreateFileMappingW GetModuleFileNameW CreateProcessW GetDiskFreeSpaceExW RemoveDirectoryW SetFileAttributesW VerifyVersionInfoW GetGeoInfoW GetUserGeoID GetSystemTimeAsFileTime CreateSemaphoreA ReleaseSemaphore DuplicateHandle GetModuleHandleA InterlockedExchange InterlockedExchangeAdd InterlockedCompareExchange TerminateThread SetLastError CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus QueueUserAPC EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects TlsAlloc TlsGetValue TlsSetValue TlsFree SleepEx SetWaitableTimer GetShortPathNameW MulDiv GlobalAlloc GlobalLock GlobalUnlock GlobalFree SystemTimeToFileTime FileTimeToSystemTime QueryPerformanceCounter QueryPerformanceFrequency OpenEventA WaitForMultipleObjectsEx GetCurrentProcessId ResumeThread CreateWaitableTimerW GetFileSizeEx GetFileAttributesExW GetExitCodeProcess WriteFile GetFileTime SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime lstrcmpiW lstrcpyW lstrcatW IsDebuggerPresent

user32

GetParent GetWindowLongW GetWindowRect InvalidateRect ShowWindow CreateWindowExW CallWindowProcW DefWindowProcW SendMessageW MessageBoxA AllowSetForegroundWindow CharNextW CharUpperW SetWindowLongW KillTimer GetWindowTextW SetForegroundWindow IsWindowVisible PostMessageW LoadBitmapW LoadIconW FillRect EndPaint BeginPaint ReleaseDC GetDC GetSystemMetrics GetMessageW TranslateMessage DispatchMessageW PostThreadMessageW SetWindowPos SetFocus LoadAcceleratorsW TranslateAcceleratorW SetWindowTextW MessageBoxW EnumWindows GetWindowThreadProcessId PostQuitMessage EnableWindow DestroyWindow GetDlgItem SetTimer RegisterClassW

gdi32

GetStockObject SelectObject CreatePen CreateFontW SetTextColor GetDeviceCaps Rectangle CreateSolidBrush DeleteObject SetBkMode

advapi32

CopySid RegOpenKeyExW RegCloseKey GetUserNameW CheckTokenMembership RegDeleteKeyW RegEnumKeyExW RegEnumValueW RegFlushKey RegQueryInfoKeyW CryptAcquireContextW RegCreateKeyExW RegDeleteValueW RegQueryValueExW DuplicateToken OpenProcessToken OpenThreadToken IsValidSid GetSidLengthRequired InitializeSid GetSidSubAuthority GetLengthSid RegSetValueExW GetTokenInformation CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext

shell32

ShellExecuteW ShellExecuteExW CommandLineToArgvW SHGetFolderPathAndSubDirW

oleaut32

RegisterTypeLi

shlwapi

StrCpyW StrRChrW PathFileExistsW StrCmpNW SHDeleteKeyW StrCmpW StrStrW PathAddBackslashW StrDupW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

sensapi

IsNetworkAlive

userenv

UnloadUserProfile

ws2_32

socket send htons freeaddrinfo getaddrinfo WSASocketW WSASend WSARecv WSAGetLastError WSASetLastError WSACleanup WSAStartup setsockopt select getsockopt ioctlsocket connect sendto closesocket

wininet

HttpSendRequestExW InternetQueryDataAvailable InternetWriteFile HttpEndRequestW HttpSendRequestW HttpAddRequestHeadersW InternetOpenW HttpQueryInfoW InternetSetOptionW InternetConnectW InternetCloseHandle InternetReadFile HttpOpenRequestW

comctl32

_TrackMouseEvent InitCommonControlsEx

gdiplus

GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipCreateBitmapFromStream GdipCreateBitmapFromStreamICM GdipCreateHBITMAPFromBitmap GdipAlloc GdipFree

winmm

timeBeginPeriod timeSetEvent timeGetDevCaps timeGetTime

psapi

EnumProcesses GetProcessImageFileNameW

iphlpapi

GetAdaptersInfo

ole32

CoInitialize CoUninitialize CreateStreamOnHGlobal CoCreateGuid CoCreateInstance StringFromGUID2

Name

.text

Size

453KB

Virtual Size

452KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

339KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

127KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ