vdlaunch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vdlaunch.exe
Size

3KB
MD5

77ad983f6528af0eb8e634f2ec6fd21e
SHA1

c0116ad4952ba3bb60df4184a311033248a8466c
SHA256

aa2293e3f36cc9387e5d40070ba4fc97ff1eaa09df180c2901684b9e9946fdd0
SHA512

658f56216337a972b277f52ada652e9cc00732fd6f675fbedc7729280ad370eb9df17af0d764d26722f9874fbe45612740a4df94636d5058f72d4df70c3e3c31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vdlaunch.exe

Files

vdlaunch.exe
.exe windows:4 windows x86

fe9ff1956e52fca4c6c7804b22f856b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GenerateConsoleCtrlEvent
SetErrorMode
WaitForMultipleObjects
CreateProcessW
DuplicateHandle
GetLastError
GetCurrentProcess
CloseHandle
GetVersion
SetStdHandle
GetCurrentProcessId
OpenFileMappingA
GetExitCodeProcess
SetEvent
SetConsoleCtrlHandler
CreateProcessA
MapViewOfFile
UnmapViewOfFile

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE