HotlineLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HotlineLauncher.exe
Size

531KB
MD5

86501a172cee0a372079eaa4128faa60
SHA1

f739e12fc4990330f97075dd89a3d64b39aadaa8
SHA256

8bb65a2a6ad43e16dadcd841da0da830a35c150b7beec5bb732dcf74fa3302e6
SHA512

651da527fc18747ba632b95c80053699e1b3b8584bd4cc462f5fa0b0d98e56e4c69624a7611d91543c05712c99e2829b4500c8882db327095b5f65822d1bb263
SSDEEP

12288:z4PJDAXlDtk/w5IYyKXqjeoQZNcRrJNnHKPI6E0J7PvX:8PQDtk/wuYvaK9Nctqg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HotlineLauncher.exe

Files

HotlineLauncher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\Hotline\svn\Tools\HotlineLauncher\obj\x86\Release\HotlineLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 525KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ