Static task
static1
Behavioral task
behavioral1
Sample
Game Prelauncher/Game Prelauncher.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Game Prelauncher/Game Prelauncher.exe
Resource
win10v2004-20231215-en
General
-
Target
995793908eba07f8f34b1463f4db646a
-
Size
137KB
-
MD5
995793908eba07f8f34b1463f4db646a
-
SHA1
c17dc1a339ebf56b8b8e46cceb52d258720c725c
-
SHA256
228f70cd8001a3e563ebeaaf2138245c242f14c1bdf4c5d4c782512fe99dd9d6
-
SHA512
6afa4d6d15d2d576be05d7ba4d728adc1ea6b96c685c5586826c3b595ca462844f66f5e4020f4863928634b0e95177fb1a20decdbba1eec36d208a1c9ed21976
-
SSDEEP
3072:e3L6iHtWUx01+m7kfX7ZOxLjAuHDiGSzzyu55nlVWgp:e3LTEUxtm7arZOxL8uj9MySFF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Game Prelauncher/Game Prelauncher.exe
Files
-
995793908eba07f8f34b1463f4db646a.rar
-
Game Prelauncher/FAQ_rus.txt
-
Game Prelauncher/Game Prelauncher.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Game Prelauncher/ReadMe.eng.txt
-
Game Prelauncher/ReadMe.rus.txt
-
Game Prelauncher/WhatsNew.txt
-
Game Prelauncher/file_id.diz
-
Game Prelauncher/license.txt