Valyse_Launcher[.]exe | Triage

Sharing

General

Target

Valyse_Launcher.exe
Size

2.7MB
MD5

9e2bc116ad34949a85a4eed186a80c4e
SHA1

bc19f67ca92cb4c898d6d6adc8de38c84d881e2a
SHA256

24cdc6ef9b67de401eb1b3ddbf5f4cd4562203474f48ab4151a3c6e827ea6fb9
SHA512

f3e56f6e4479a1546542ba137593a18c23a66ef793c7d4acd48dbdb31453f256d9d3efc9ff50963972c2bf42ac1b7d451825739cd98d6f82335f879f8547ab96
SSDEEP

49152:yIn+z8/YZ1SumIQMRiHNjS+fdKZiuubngyRiDDUXBzJHqBwbxVD:yh5Z1uI7MXgMi3sH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Valyse_Launcher.exe

Files

Valyse_Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Alex\Desktop\acestuff\NewValyseGithub\ValyseLauncher\obj\Release\Valyse Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ