MKLauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

MKLauncher.exe
Size

941KB
MD5

0b50360bc2a8d04dcc7bcd50d4f5d987
SHA1

c60971136df67ab76c5625640ef90afa70e81269
SHA256

179220fa469fef639d1998198781d1ad34061d4daad527b7ad03068404d89ca0
SHA512

434b2981cd9c99f71584fe590b19a2cb8722f997b644e09a200969f8ae3d1ab52f0626bc1fc67ee4dc7d656398ab9e10ab4c4fecda250065c8aad1b5eda4afe7
SSDEEP

6144:Ss4dJD94uu6QgNqFaOjYDX3f90AAoUdBe3ZTa26rjUAHys:94dtW364ynf90AAoUdBe3ZTa26rIAH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MKLauncher.exe

Files

MKLauncher.exe
.exe windows:6 windows x86

af9c5d2e504866f4631e88a0dc3e72cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

kernel32

GetCurrentThreadId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentProcessId
WideCharToMultiByte
GetSystemTimeAsFileTime
Sleep
GetLastError
SetLastError
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer

shell32

ShellExecuteW
SHGetFolderPathW

msvcr110

_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
memset
memcpy
?terminate@@YAXXZ
??2@YAPAXI@Z
_onexit
__dllonexit
__FrameUnwindFilter
_amsg_exit
??3@YAXPAX@Z
tolower
memmove
__CxxFrameHandler3
swscanf
_purecall
?what@exception@std@@UBEPBDXZ
_cexit
isspace
__CxxUnregisterExceptionObject
__CxxDetectRethrow
strstr
?__ExceptionPtrCopy@@YAXPAXPBX@Z
memchr
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
sprintf_s
strcat_s
mbstowcs
??_U@YAPAXI@Z
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
_CxxThrowException

msvcp110

?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0id@locale@std@@QAE@I@Z
??0_Lockit@std@@QAE@H@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z

d3d9

Direct3DCreate9

setupapi

SetupDiGetClassDevsExW
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

user32

EnumDisplayDevicesW

advapi32

RegCloseKey
RegEnumValueW

ole32

CoInitializeEx

mscoree

_CorExeMain

Exports

Exports

NvOptimusEnablement

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af9c5d2e504866f4631e88a0dc3e72cb

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

shell32

msvcr110

msvcp110

d3d9

setupapi

user32

advapi32

ole32

mscoree

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 888KB - Virtual size: 887KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 888KB - Virtual size: 887KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 6KB - Virtual size: 5KB