Resubmissions

09-03-2024 19:39

240309-yc764agd83 7

General

  • Target

    PrismLauncher-Windows-MSVC-Setup-8.2.exe

  • Size

    18.1MB

  • MD5

    242927c23fc9b6ff5efaa51aaf5eda58

  • SHA1

    53e851f8a136ae29aeb0159d9fa221b5e37a8b4c

  • SHA256

    aa3c568c88329c4dd471492c0db25a6c299b4346562d63e850e3064902d86d69

  • SHA512

    cda01dc9762a02d47829cadb0678fcf0b361d6ce4a9b3ddffa5bb7636487bd16446076274ac5a4ad015cb4d52fff4cccbb49b472ed031616fccc1826b748ce17

  • SSDEEP

    393216:CMU77hg6HfhIjEYqNPPoDlXsLAmCrQ7cAIYE9rpyTXuEz18Tcso:CMUhHfhIgTkX3mwQ7cAo9+Pyo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • PrismLauncher-Windows-MSVC-Setup-8.2.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    68b7023f8923dd087549802f8fa631c3


    Headers

    Imports

    Exports

    Sections

  • Qt6Core.dll
    .dll windows:6 windows x64 arch:x64

    0aba848ac43c044d9ca49c8ea65b836b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Core5Compat.dll
    .dll windows:6 windows x64 arch:x64

    3b3c9f0e06f8532d4288754a2aa14da3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Gui.dll
    .dll windows:6 windows x64 arch:x64

    b6f403d8901e46de286c8dc882da4313


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Network.dll
    .dll windows:6 windows x64 arch:x64

    4800f83176152b668676f7b55e467234


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Svg.dll
    .dll windows:6 windows x64 arch:x64

    ceb5206ab09e8f86cc988307cf0e9ef4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Widgets.dll
    .dll windows:6 windows x64 arch:x64

    28d6cb3e7498b045f02656b4eb341b59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Xml.dll
    .dll windows:6 windows x64 arch:x64

    a5e86f3b929d0c3ffe1c10ab71d34f25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    8b9b3d8aaf8018f40682b772d44db9cf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    b2db3f965cb6789d5ba51bedb32753b5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    a5b1195072b8bf58e86f36b3fa0bbb21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    4d06e0a222bdbb1181cb5f5a645e42da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    1881afc6c302c5efcb3b82f4d423f296


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    c8b16ce5c404b59a14bb4cce9b8e34ef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    fd45e99227cd5805ab6920fdd6334b3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    ae36eb63daf510b28a65194c54407c82


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jars/JavaCheck.jar
    .jar
  • jars/NewLaunch.jar
    .jar
  • jars/NewLaunchLegacy.jar
    .jar
  • platforms/qdirect2d.dll
    .dll windows:6 windows x64 arch:x64

    35e1e1f0bf4a3ae39ae017f4853498e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    019f3617b4da26f469907857c66c0845


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • prismlauncher.exe
    .exe windows:6 windows x64 arch:x64

    c57eb40a501ee9d39d0a0820fc04f4dc


    Headers

    Imports

    Sections

  • prismlauncher_filelink.exe
    .exe windows:6 windows x64 arch:x64

    548ed23fa1685b87caed66e61b7c535b


    Headers

    Imports

    Sections

  • prismlauncher_updater.exe
    .exe windows:6 windows x64 arch:x64

    7e229e9b38a02eb18642f9167082bceb


    Headers

    Imports

    Sections

  • qt.conf
  • qtlogging.ini
  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    a9924ca1c630d6eb9dbd07f090bd9baa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • tls/qschannelbackend.dll
    .dll windows:6 windows x64 arch:x64

    d7dec306eee41c188bb518bb1d1db735


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    68b7023f8923dd087549802f8fa631c3


    Headers

    Imports

    Exports

    Sections