Magick Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Magick Launcher.exe
Size

5.0MB
MD5

8380f5797e9634985f9c44995f1920b1
SHA1

329e5eb9e707e322ae35973b4de5e9992df1e2e3
SHA256

a28925a91af8dee172554bdbf02c2ffaa8fe463998ef97fdf2795ab36d1625af
SHA512

f66631b0e6a39009a28710ea3086d3ee7e83492daa2ae8f7f0730f7b02088d9e47c319d1380f1ea17797de4a6426d0edb62a5126b990db831689198c650e87ea
SSDEEP

98304:NlH+6Vv3wwQ2uiQvUwwrfUh0KHOyZzwhDrbsnod6ila5TafjAoJ4Ol3rHd2ZoMHB:NU6VYR2uTswwrs0KOawDrbAtiU5gjAoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Magick Launcher.exe

Files

Magick Launcher.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 550KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 20KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.winlice
Size: - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ