AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
1 signatures
General
-
Target
launcher.com
-
Size
6.9MB
-
MD5
3887889e4a4b83b201b3080dbf03130a
-
SHA1
6c163ddb5e4059e468f86e622b3abb550b2a73da
-
SHA256
45a3a6fd1e30c01732949eb80c146a9dafd756821652277a9b72696b50f346e4
-
SHA512
b45bd439ecd2238f308fd0028b8fb7a709616cd60e84d94075d4ec08cb7e3a541ba5e8f8042e36683a7cae54fd31e471b7b6b830bb0c370e3d30c0ba1fb3d502
-
SSDEEP
98304:x+uCX3E2rSBSDsoMFe4/TKsFfU92W8Ki6RGg98167inekeSz5p4R0:xzCHPW8DiFtTKsFfU3C64R1NeS1pp
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource launcher.com
Files
-
launcher.com.exe windows:6 windows x64 arch:x64
44a161a40c86e543f0da785fe3242d94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
winmm
timeGetDevCaps
ws2_32
setsockopt
htonl
getsockopt
WSARecv
FreeAddrInfoW
WSACleanup
recv
send
WSASetLastError
WSAIoctl
closesocket
WSAGetLastError
WSASend
shutdown
WSASocketW
WSAStartup
getsockname
socket
connect
GetAddrInfoW
bind
ntdll
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlNtStatusToDosError
RtlPcToFileHeader
ncrypt
BCryptGenRandom
NCryptGetProperty
NCryptFreeObject
crypt32
CryptAcquireCertificatePrivateKey
CertGetCertificateChain
CertFreeCertificateContext
CertGetNameStringA
CertGetCertificateContextProperty
CertFindCertificateInStore
CertCreateContext
CertCreateCertificateChainEngine
CertVerifyCertificateChainPolicy
CertOpenStore
CertFreeCertificateChain
CertSetCertificateContextProperty
PFXExportCertStoreEx
CertCloseStore
CertAddCertificateContextToStore
CertFreeCertificateChainEngine
iphlpapi
GetCurrentThreadCompartmentId
SetCurrentThreadCompartmentId
gdiplus
GdipCreateFromHDC
GdipFillEllipseI
GdipCreateBitmapFromGraphics
GdipSetTextRenderingHint
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipGetFontCollectionFamilyCount
GdipDeleteGraphics
GdipDrawString
GdipDeleteFont
GdipGetImageWidth
GdipDeletePen
GdipDrawImageI
GdipCreatePen1
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipDrawArcI
GdipDrawLineI
GdipSetStringFormatFlags
GdipGetFontHeight
GdipLoadImageFromStream
GdiplusStartup
GdiplusShutdown
GdipImageSelectActiveFrame
GdipSetClipRectI
GdipSetSolidFillColor
GdipDrawBezierI
GdipCreateFromHWND
GdipSetPenWidth
GdipGraphicsClear
GdipFillPieI
GdipCreateSolidFill
GdipCreateFont
GdipSetSmoothingMode
GdipDisposeImage
GdipGetFontCollectionFamilyList
GdipDrawImageRectI
GdipDrawEllipseI
GdipDeleteBrush
GdipDrawPolygonI
GdipSetPenColor
GdipDrawPieI
GdipDrawRectangleI
GdipFillPolygonI
GdipGetImageHeight
GdipDeleteStringFormat
GdipPrivateAddMemoryFont
shlwapi
ord12
user32
GetKeyState
SetCapture
ReleaseCapture
BeginPaint
EndPaint
GetMessageW
DefWindowProcW
PostMessageW
SetProcessDpiAwarenessContext
DestroyWindow
SetWindowPos
GetDpiForWindow
IsWindow
ScreenToClient
UnregisterClassW
ShowWindow
DispatchMessageW
SetTimer
PeekMessageW
RegisterClassW
TrackMouseEvent
TranslateMessage
LoadCursorA
LoadIconA
KillTimer
PostQuitMessage
SystemParametersInfoW
CreateWindowExW
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
kernel32
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameW
FlsGetValue
GetDateFormatW
GetTimeFormatW
CompareStringW
FreeLibraryAndExitThread
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetModuleHandleExW
ExitProcess
LCMapStringW
ReadFile
ExitThread
HeapReAlloc
OutputDebugStringW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringEx
GetLocaleInfoEx
IsValidCodePage
EncodePointer
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
FormatMessageA
LoadLibraryExW
AreFileApisANSI
GetFullPathNameW
GetFileInformationByHandle
GetACP
GetOEMCP
GetCurrentDirectoryW
CreateFileW
FindFirstFileExW
RaiseException
GetTimeZoneInformation
VirtualQuery
FlsAlloc
FlsFree
GetSystemInfo
GetNumaNodeProcessorMask
FlsSetValue
GetLargePageMinimum
VirtualAlloc
GetCurrentProcess
VirtualFree
GetNumaHighestNodeNumber
GetCurrentProcessId
WriteFile
GetFileType
GetEnvironmentVariableW
GetStdHandle
WideCharToMultiByte
FindNextFileW
FindFirstFileW
FindClose
TlsFree
TlsSetValue
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapSize
WriteConsoleW
SetEndOfFile
LocalFree
SetPriorityClass
WaitForSingleObject
SetEvent
CloseHandle
CreateEventA
InitializeCriticalSectionEx
GetLastError
DecodePointer
DeleteCriticalSection
MultiByteToWideChar
EnterCriticalSection
WakeAllConditionVariable
WakeConditionVariable
LeaveCriticalSection
InitializeCriticalSection
TlsGetValue
GetCurrentProcessorNumberEx
GetSystemTimeAdjustment
GetActiveProcessorCount
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
InitializeSListHead
InterlockedPopEntrySList
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
InterlockedPushEntrySList
QueryDepthSList
GetCurrentThreadId
ResetEvent
SetThreadPriority
CreateThread
SetThreadIdealProcessor
SetThreadGroupAffinity
HeapCreate
HeapFree
GetLogicalProcessorInformationEx
QueryPerformanceFrequency
HeapAlloc
HeapDestroy
GlobalMemoryStatusEx
CancelIo
PostQueuedCompletionStatus
LoadLibraryA
CancelIoEx
GetQueuedCompletionStatusEx
GetCurrentProcessorNumber
GetProcAddress
FreeLibrary
CreateIoCompletionPort
SetFileCompletionNotificationModes
Sleep
SetLastError
GetSystemTime
SystemTimeToFileTime
InitializeCriticalSectionAndSpinCount
TlsAlloc
Exports
Exports
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 612KB - Virtual size: 847KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. oZ Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.N6w Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d_s Size: 470KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ