Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10v2004-20230915-en
Target
Launcher.exe
Size
1.9MB
MD5
866da32fcc073d59f06d70114ad94227
SHA1
76c7569dc698bd5cde4ea341fad2e7490091aeab
SHA256
96fef48ebc4fafc40ac5fb3454e8ed5eac49736f393849ce4aa9a9835532d7ef
SHA512
e7b5bc793f12dd10cf62c7f3facc407c67274e061db3e4acb42603861e5f71645577b318e4171381c89c32eb7daebc8bb6cf79d5cb2d4bac1c3f0dae2f99aa40
SSDEEP
24576:mgsXIUuk4UIw1HiRDfe9BQqVmo1/1NqaM554TsMnKAm5zXDeaBn7Jqb20Z:mgsXxB4UIObcn6yJaTTn6E1
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SleepEx
GetSystemDirectoryA
VerifyVersionInfoA
GetTickCount
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
CreateFileA
GetFileSizeEx
GlobalAlloc
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
FormatMessageA
SetLastError
QueryFullProcessImageNameW
GetModuleHandleW
GetModuleFileNameA
EnterCriticalSection
MapViewOfFile
CreateFileMappingW
VirtualProtect
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
VirtualFreeEx
CreateProcessA
CreateRemoteThread
GetConsoleWindow
GetProcessHeap
GetCurrentProcessId
VirtualAllocEx
FlushConsoleInputBuffer
QueueUserAPC
HeapAlloc
CloseHandle
Process32FirstW
DeleteFileW
DeleteFileA
Process32NextW
GetFileAttributesA
UpdateProcThreadAttribute
GetLastError
Sleep
CreateToolhelp32Snapshot
OpenProcess
ResumeThread
WaitForSingleObject
InitializeProcThreadAttributeList
GetModuleFileNameW
LoadLibraryExA
TerminateProcess
VirtualAlloc
GetStdHandle
SetConsoleTitleA
HeapSize
HeapReAlloc
SetConsoleTextAttribute
HeapFree
WriteProcessMemory
QueryPerformanceCounter
FreeLibrary
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
GlobalFree
GlobalLock
LeaveCriticalSection
UnmapViewOfFile
RtlVirtualUnwind
UnhandledExceptionFilter
WideCharToMultiByte
SetUnhandledExceptionFilter
GlobalUnlock
GetModuleHandleA
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
LocalFree
HeapDestroy
CreateFileW
GetExitCodeProcess
LoadLibraryA
MultiByteToWideChar
PostQuitMessage
LoadIconW
CreateWindowExA
RegisterClassExW
GetAsyncKeyState
ShowWindow
GetWindowThreadProcessId
PostThreadMessageW
GetClipboardData
GetWindowRect
DefWindowProcW
SetWindowLongW
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetWindowsHookExW
SetClipboardData
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
SetCapture
LoadCursorW
GetForegroundWindow
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
GetDesktopWindow
GetKeyState
UpdateWindow
SetSecurityInfo
OpenServiceW
RegOpenKeyExW
CheckTokenMembership
FreeSid
RegSetValueExW
RegEnumKeyExW
ControlService
AllocateAndInitializeSid
OpenSCManagerW
CloseServiceHandle
RegCloseKey
OpenProcessToken
AddAccessAllowedAce
GetLengthSid
GetTokenInformation
InitializeAcl
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
ConvertSidToStringSidA
CopySid
IsValidSid
RegQueryValueExW
ShellExecuteA
ShellExecuteW
ShellExecuteExA
ShellExecuteExW
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Xbad_function_call@std@@YAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Random_device@std@@YAIXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPEBD@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
ImmSetCandidateWindow
DwmExtendFrameIntoClientArea
URLDownloadToFileA
InternetCheckConnectionA
Direct3DCreate9Ex
D3DXCreateTextureFromFileA
GetAdaptersInfo
IdnToAscii
ord30
ord79
ord35
ord200
ord301
ord33
ord143
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord217
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
gethostname
sendto
recvfrom
ntohl
connect
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
ntohs
setsockopt
getsockopt
getsockname
htons
getpeername
socket
bind
WSAGetLastError
send
recv
closesocket
listen
PathFileExistsA
GetModuleInformation
UnloadUserProfile
__CxxFrameHandler4
__std_exception_destroy
__std_exception_copy
_CxxThrowException
memchr
strchr
__std_terminate
memcpy
__C_specific_handler
__current_exception_context
memmove
memset
strrchr
memcmp
strstr
__current_exception
free
_callnewh
realloc
malloc
calloc
_set_new_mode
_set_fmode
__stdio_common_vsprintf
_wfopen
fopen
_lseeki64
fwrite
_popen
__p__commode
fflush
fread
_write
_pclose
fgets
_close
_open
__stdio_common_vfprintf
fputs
freopen
ftell
_get_stream_buffer_pointers
_read
fputc
_fseeki64
fsetpos
ungetc
fseek
__acrt_iob_func
setvbuf
fgetpos
__stdio_common_vsscanf
puts
fgetc
feof
fclose
strpbrk
tolower
strcmp
strcspn
strspn
strncpy
toupper
_strdup
strncmp
_stricmp
isupper
srand
rand
qsort
strtoull
strtoul
atoi
strtod
strtoll
strtol
perror
exit
_errno
_invalid_parameter_noinfo_noreturn
_beginthreadex
strerror
_register_thread_local_exe_atexit_callback
_c_exit
_getpid
__p___argv
__p___argc
_exit
_resetstkoflw
terminate
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_invalid_parameter_noinfo
_initterm_e
_seh_filter_exe
_set_app_type
__sys_nerr
_get_initial_narrow_environment
_initterm
system
_difftime64
_time64
_gmtime64
_localtime64_s
_mktime64
strftime
_access
_unlink
_stat64
_fstat64
remove
_lock_file
rename
_unlock_file
getenv
localeconv
_configthreadlocale
___lc_codepage_func
acosf
sqrtf
cosf
__setusermatherr
ceilf
fmodf
_dclass
sinf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ