Launcher[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Launcher.exe
Size

35.0MB
MD5

e72f30b661444897a0379168c9e81c40
SHA1

4ae5e29ad92efd7d946df9050e13579dc9ca43b7
SHA256

e93c9b6e46554ff72419e0c338d0ac3ab74594b626e42d34cb4f71d79db8bd53
SHA512

eab66db45e4838d1b9bbe6ac2ffb39d89e552e5c3ea034dc632210cd089e51f3a61fb84c436bfabc93c8bc1d4a9a0402443f3a8a905797ee7cdaa9cab2b8f7ef
SSDEEP

786432:CyGizyB9xeQOB6tKgvbyO5jEN94iTYdTlFb2kw09/O9v1HKKPa+:fzyJO8bvbyOJ294iTYXFb2nfv1HKqz

Score

1^/10

Malware Config

Signatures

Files

Launcher.exe
.exe windows:6 windows x64 arch:x64

941031550ec8e13cbf8505cae081d7bd

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:88:c0:8f:56:6d:2b:1f:0c:19:4d:b1:f8:ca:c9:a9
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

18-01-2023 00:00

Not After

20-01-2026 23:59

Subject

CN=Rockstar Games\, Inc.,O=Rockstar Games\, Inc.,L=New York,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:83:1c:01:d4:9f:e5:8c:6f:4d:5f:0e:c4:12:5c:e2:38:20:65:fd
Signer

Actual PE Digest

6d:83:1c:01:d4:9f:e5:8c:6f:4d:5f:0e:c4:12:5c:e2:38:20:65:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

X:\rgsc_streams\rgl\release_02\build\launcher\win64_Final\Launcher.pdb

Imports

kernel32

GetLastError
GetComputerNameW
CloseHandle
GetCurrentProcess
GetCommandLineW
LocalFree
GetSystemFirmwareTable
QueryPerformanceCounter
QueryPerformanceFrequency
GetCommandLineA
SetCurrentDirectoryW
GetCurrentDirectoryW
GetModuleFileNameW
GetModuleHandleW
GetCurrentProcessId
ReleaseMutex
CreateMutexW
FreeLibrary
LoadLibraryExW
SetDefaultDllDirectories
SetDllDirectoryW
GetThreadId
CreateFileW
SetFilePointer
WriteFile
Sleep
CopyFileW
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDrives
GetVersionExW
GetPhysicallyInstalledSystemMemory
GetModuleHandleA
GetProcAddress
LoadLibraryW
GetVolumePathNameA
WideCharToMultiByte
GetUserDefaultUILanguage
ReadFile
SetFilePointerEx
GetOverlappedResult
SetEnvironmentVariableW
TerminateProcess
WaitForMultipleObjects
GetExitCodeProcess
GetVolumeInformationW
WaitForSingleObject
GetProcessId
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
CreateProcessW
VerSetConditionMask
VerifyVersionInfoW
SetThreadUILanguage
GetThreadUILanguage
GetUserDefaultLocaleName
SetLastError
CreateDirectoryW
GetDriveTypeW
GetLogicalDriveStringsW
QueryDosDeviceW
FormatMessageA
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
MultiByteToWideChar
GetTempPathW
GetStartupInfoW
GetTickCount64
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
GetEnvironmentVariableA
GetEnvironmentVariableW
SetEnvironmentVariableA
GetFileAttributesW
GetSystemDefaultLocaleName
CompareFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
SetEvent
ReleaseSemaphore
CreateMutexA
CreateEventA
CreateThread
GetCurrentThread
GetCurrentThreadId
OpenThread
SetThreadPriority
SetThreadPriorityBoost
GetThreadPriority
ExitThread
ResumeThread
SetThreadIdealProcessor
GetProcessAffinityMask
SetThreadAffinityMask
CreateSemaphoreA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
HeapAlloc
HeapFree
GetProcessHeap
GlobalMemoryStatusEx
VirtualAlloc
VirtualFree
VirtualQueryEx
WerSetFlags
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
AddVectoredExceptionHandler
Process32First
Process32Next
SetPriorityClass
GetPriorityClass
LocalAlloc
ExitProcess
GetDiskFreeSpaceExW
GetFileAttributesExW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileTime
ResetEvent
MoveFileExW
MoveFileWithProgressW
GetSystemDefaultUILanguage
CreateFileA
DeleteFileA
ConnectNamedPipe
DisconnectNamedPipe
CancelIoEx
CreateNamedPipeA
GetVolumeInformationA
SetHandleInformation
CreatePipe
SetNamedPipeHandleState
CreateProcessA
GetWindowsDirectoryA
EncodePointer
DecodePointer
InitializeCriticalSectionEx
LCMapStringEx
CompareStringEx
GetCPInfo
GetStringTypeW
WaitForSingleObjectEx
CreateEventW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSection
GetSystemDirectoryW
GetFullPathNameW
OutputDebugStringW
GetFileSizeEx
UnregisterWaitEx
MoveFileW
RegisterWaitForSingleObject
GetStdHandle
GetFileType
SleepEx
GetVersion
LockFileEx
UnlockFileEx
FormatMessageW
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
FindFirstFileExW
GetFileTime
RtlPcToFileHeader
RtlUnwindEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
GetModuleHandleExW
SetConsoleCtrlHandler
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
WriteConsoleW
InitOnceBeginInitialize
InitOnceComplete
K32EnumProcesses
K32GetProcessImageFileNameA
GetThreadContext
LoadLibraryA
HeapLock
HeapWalk
HeapUnlock

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 27.3MB - Virtual size: 27.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

941031550ec8e13cbf8505cae081d7bd

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

0d:88:c0:8f:56:6d:2b:1f:0c:19:4d:b1:f8:ca:c9:a9Certificate

Extended Key Usages

Key Usages

6d:83:1c:01:d4:9f:e5:8c:6f:4d:5f:0e:c4:12:5c:e2:38:20:65:fdSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 1.1MB - Virtual size: 4.6MB

.pdata Size: 206KB - Virtual size: 206KB

CPADinfo Size: 512B - Virtual size: 512B

_RDATA Size: 512B - Virtual size: 512B

.rsrc Size: 622KB - Virtual size: 622KB

.reloc Size: 27KB - Virtual size: 27KB

.text Size: 27.3MB - Virtual size: 27.3MB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

0d:88:c0:8f:56:6d:2b:1f:0c:19:4d:b1:f8:ca:c9:a9
Certificate

6d:83:1c:01:d4:9f:e5:8c:6f:4d:5f:0e:c4:12:5c:e2:38:20:65:fd
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 1.1MB - Virtual size: 4.6MB

.pdata
Size: 206KB - Virtual size: 206KB

CPADinfo
Size: 512B - Virtual size: 512B

_RDATA
Size: 512B - Virtual size: 512B

.rsrc
Size: 622KB - Virtual size: 622KB

.reloc
Size: 27KB - Virtual size: 27KB

.text
Size: 27.3MB - Virtual size: 27.3MB