c:\build\discbot03\t1xfinal-pc-1.01\pc\default\Release\launcher.pdb
Static task
static1
1 signatures
General
-
Target
launcher.exe
-
Size
1.2MB
-
MD5
41cd45ac1c073934a631da7168277269
-
SHA1
be040b968fee00fdd763a9c3d8974b1e80ed446f
-
SHA256
24b0d76728c6a94cb2616c77643a59c010dfc43ff24934eea59ad96b9d0db2ae
-
SHA512
f64ad347cb0fc4e6ea92bca6c28f76e100476dedcc0c923cc59a698cab1b300ba88b4f73a7cb4d7159540bb28cca6af5eddc5347f27c7405d8333c1c27c17ee9
-
SSDEEP
24576:cQiowOUcrTtgXvmlevpgceVcYt8RUitbw:6oBUcPevpgcotRWw
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource launcher.exe
Files
-
launcher.exe.exe windows:6 windows x64 arch:x64
3295115e4a202235a1241e5d7f8ba55e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ole32
CoInitializeEx
CoUninitialize
winpixeventruntime
PIXGetThreadInfo
PIXEventsReplaceBlock
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW
AvSetMmThreadPriority
winmm
timeEndPeriod
timeBeginPeriod
kernel32
HeapReAlloc
CreateFileW
WriteConsoleW
ReadFile
ReadConsoleW
RtlLookupFunctionEntry
HeapSize
GetConsoleMode
GetConsoleOutputCP
CloseHandle
CreateProcessA
OutputDebugStringW
GetProcessTimes
GetCurrentProcess
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
RaiseException
WaitForSingleObject
Sleep
SwitchToThread
GetCurrentThread
SetThreadPriority
SuspendThread
ResumeThread
GetThreadId
SetThreadDescription
SwitchToFiber
DeleteFiber
ConvertFiberToThread
CreateFiberEx
ConvertThreadToFiber
SetThreadAffinityMask
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
SetEvent
ResetEvent
CreateEventExW
PulseEvent
VirtualAlloc
VirtualFree
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleW
GetProcAddress
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
FormatMessageA
SetWaitableTimer
CreateWaitableTimerExW
WaitForMultipleObjects
CreateWaitableTimerW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlUnwind
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetStartupInfoW
FlushFileBuffers
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RtlPcToFileHeader
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
MultiByteToWideChar
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
Sections
.text Size: 706KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 695KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 337B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 1024B - Virtual size: 562B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ