Starlight[.]Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Starlight.Launcher.exe
Size

1.6MB
MD5

fc9f432748687410eca84c7e607c5b1a
SHA1

80e455a9fe8376bef854bd2503bb6bfc24583e1a
SHA256

72cd62b52d77b3203d48206ae90a499ba6d824a8145c8668aa795eff385a27ab
SHA512

5c1bb2727afb4c573bb9c873d1eaff862e8b45bcd210fe191d4ae9067dd016a21ca27c2451dab70999f108a5f1e24ea733a433da56f73588191f91f3d68a8829
SSDEEP

49152:xk6sw+W7SC+VKc0xBsW76pO0bIweSi27tX5:xDHwFzW7wf7P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Starlight.Launcher.exe

Files

Starlight.Launcher.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ