Static task
static1
Behavioral task
behavioral1
Sample
Launcher-PC.v.9.54.exe
Resource
win7-20231215-en
Errors
General
-
Target
Launcher-PC.v.9.54.exe
-
Size
783.4MB
-
MD5
7a399874c4edf0b926c49518e163f1bf
-
SHA1
c92f626d532241f01679aa8335a6eff6577ade93
-
SHA256
f226b55c875c5bc831d59d6d12374592e6ecc937fad173f3c595418f1f3db159
-
SHA512
c5f14636144fe623742406c0bda4658f0b99986353f63ff68ed29b6995b9e20469876a5dafd9cd949c87483b676cd11d6fdd9abf3325f68501bd6d24f0ccbbba
-
SSDEEP
3145728:0Lhxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxi:0LM
Malware Config
Signatures
Files
-
Launcher-PC.v.9.54.exe.exe windows:5 windows x86 arch:x86
7e21a6e44e2d9d8d95eca85ad1e4be40
Code Sign
67:6e:20:ee:07:fc:c9:49:aa:7e:95:78:32:b7:bd:abCertificate
IssuerCN=ActiveReports RDF document API,OU=Active,O=GrapeCity Inc. All rights reserved,ST=CH,C=CHNot Before10/12/2023, 16:06Not After10/09/2025, 00:00SubjectCN=ActiveReports RDF document API,OU=Active,O=GrapeCity Inc. All rights reserved,ST=CH,C=CH39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03/05/2023, 00:00Not After02/08/2034, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b1:30:3b:a0:f0:8e:eb:34:59:51:05:c4:a0:41:08:7f:e8:cf:d6:43:12:d7:4c:a9:6a:ae:ba:3f:32:2c:d1:f3Signer
Actual PE Digestb1:30:3b:a0:f0:8e:eb:34:59:51:05:c4:a0:41:08:7f:e8:cf:d6:43:12:d7:4c:a9:6a:ae:ba:3f:32:2c:d1:f3Digest Algorithmsha256PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__CxxFrameHandler3
kernel32
ExitProcess
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharToOemA
GetProcessWindowStation
GetUserObjectInformationW
advapi32
RegGetValueA
ole32
CoInitializeSecurity
oleaut32
SysAllocString
shlwapi
ord155
Sections
.text Size: - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MZ‹&$ Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MZ‹&$ Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp̺© Size: - Virtual size: 993KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp̺© Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp̺© Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 139KB - Virtual size: 463KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ