D:\a\launcher\launcher\src-tauri\target\release\deps\seed.pdb
Static task
static1
General
-
Target
Retrac Launcher.exe
-
Size
11.6MB
-
MD5
794eac25ae58bb6a7627be576a3c2a29
-
SHA1
2a48646d0d275cbf3492a7b138ae3ced77734fe3
-
SHA256
c2a52a50b08bd42ac8a27928245fc1d5be7e89be263f4b01447be1c4123b69fd
-
SHA512
43a2d34202c237b7981b592a571d124149b09fd42a063550e81650f215da1394f3299048f75c1e514c9bb1a652c87929629704c8b362df85216a23ffc43a1cea
-
SSDEEP
98304:eKHxwfLG75NLHc70Ph/e98943AE1swY0gBdDFcavjkbLz78x5q8pmuxXiOqihVQl:7ws/Zjkbq9qiwTSE/9i1K57h8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Retrac Launcher.exe
Files
-
Retrac Launcher.exe.exe windows:6 windows x64 arch:x64
1572cf8f04da16b1e63727ed8c113953
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
VirtualQueryEx
GetSystemTimes
LocalFree
GetCurrentProcessId
GlobalMemoryStatusEx
K32GetPerformanceInfo
GetSystemInfo
WaitForSingleObject
FormatMessageW
HeapAlloc
GetExitCodeProcess
FreeLibrary
GetProcAddress
LoadLibraryA
HeapFree
GetProcessHeap
GetProcessIoCounters
GetLastError
ReadProcessMemory
SleepConditionVariableSRW
LoadLibraryExA
ReleaseSRWLockShared
AcquireSRWLockShared
GetProcessTimes
GetModuleHandleA
lstrlenW
GetUserDefaultLocaleName
CreateMutexA
Sleep
WaitForSingleObjectEx
GetTempPathW
GlobalLock
GlobalSize
GlobalUnlock
GetSystemTimeAsFileTime
TerminateProcess
OpenProcess
GetCurrentThread
GlobalAlloc
CreateThread
GlobalFree
MultiByteToWideChar
WriteConsoleW
GetCurrentProcess
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
GetUserDefaultUILanguage
LCIDToLocaleName
ReadFileEx
LoadLibraryW
GetFullPathNameW
ExitProcess
CopyFileExW
GetFinalPathNameByHandleW
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
FindClose
FindNextFileW
ReleaseMutex
HeapReAlloc
QueryPerformanceFrequency
WakeConditionVariable
WakeAllConditionVariable
GetProcessId
SleepEx
WriteFileEx
GetStdHandle
SetFilePointerEx
SetFileInformationByHandle
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetLastError
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
Process32Next
QueryPerformanceCounter
SetWaitableTimer
CreateWaitableTimerExW
SwitchToThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
Process32First
CreateToolhelp32Snapshot
CompareStringOrdinal
DeleteProcThreadAttributeList
FreeEnvironmentStringsW
GetConsoleMode
GetFileInformationByHandle
TlsFree
SetFileCompletionNotificationModes
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
CreatePipe
GetNamedPipeServerProcessId
LoadLibraryExW
GetNamedPipeClientProcessId
GetEnvironmentVariableW
WaitNamedPipeW
DuplicateHandle
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
CreateIoCompletionPort
SetHandleInformation
CreateFileW
ReadFile
WriteFile
DisconnectNamedPipe
FlushFileBuffers
CreateNamedPipeW
ConnectNamedPipe
GetCurrentThreadId
TryAcquireSRWLockExclusive
GetModuleHandleW
CloseHandle
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
comctl32
SetWindowSubclass
DefSubclassProc
RemoveWindowSubclass
TaskDialogIndirect
user32
GetKeyboardState
MonitorFromPoint
EnumDisplayMonitors
GetClipCursor
PostQuitMessage
ShowWindow
CreateAcceleratorTableW
AppendMenuW
CreateMenu
CheckMenuItem
SetMenuItemInfoW
ClipCursor
DestroyAcceleratorTable
GetRawInputData
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
ReleaseCapture
RegisterClassExW
RegisterWindowMessageA
EnumChildWindows
IsWindowVisible
GetKeyState
RegisterClipboardFormatW
MapVirtualKeyExW
CloseClipboard
SetClipboardData
EmptyClipboard
VkKeyScanW
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetWindowLongPtrW
InvalidateRgn
SetMenu
SystemParametersInfoA
GetAsyncKeyState
RegisterTouchWindow
ShowCursor
GetWindowRect
IsProcessDPIAware
GetActiveWindow
DestroyIcon
SendMessageW
SetWindowTextW
GetMenu
GetWindowTextLengthW
FlashWindowEx
GetWindowTextW
SetWindowDisplayAffinity
IsIconic
SetForegroundWindow
CreateIcon
GetForegroundWindow
GetSystemMetrics
IsWindow
SetWindowLongW
GetSystemMenu
GetKeyboardLayout
ToUnicodeEx
UnregisterHotKey
CreateWindowExW
GetMessageA
DispatchMessageA
DispatchMessageW
TranslateMessage
SetWindowPos
GetMonitorInfoW
MonitorFromWindow
GetCursorPos
AdjustWindowRectEx
SetCursor
GetDC
CloseTouchInputHandle
ScreenToClient
GetTouchInputInfo
DestroyWindow
TrackMouseEvent
PostMessageW
MonitorFromRect
LoadCursorW
ClientToScreen
GetClientRect
GetWindowLongW
GetUpdateRect
PeekMessageW
PostThreadMessageW
ValidateRect
RedrawWindow
SetCursorPos
MapVirtualKeyW
EnableMenuItem
SendInput
AllowSetForegroundWindow
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
DefWindowProcW
TranslateAcceleratorW
GetAncestor
GetMessageW
RegisterHotKey
ole32
CoInitializeEx
OleInitialize
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
RegisterDragDrop
RevokeDragDrop
shell32
SHAppBarMessage
SHGetKnownFolderPath
ShellExecuteW
SHCreateItemFromParsingName
CommandLineToArgvW
DragQueryFileW
DragFinish
gdi32
DeleteObject
GetDeviceCaps
CreateRectRgn
dwmapi
DwmExtendFrameIntoClientArea
DwmEnableBlurBehindWindow
advapi32
GetTokenInformation
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
RegOpenKeyExW
SystemFunction036
RegQueryValueExW
CopySid
RegCloseKey
RegCreateKeyExW
RegSetValueExW
GetLengthSid
OpenProcessToken
IsValidSid
ntdll
NtDeviceIoControlFile
RtlNtStatusToDosError
NtQuerySystemInformation
RtlGetVersion
NtCreateFile
NtWriteFile
RtlGetNtVersionNumbers
NtCancelIoFileEx
NtReadFile
NtQueryInformationProcess
oleaut32
SysStringLen
SysFreeString
GetErrorInfo
SetErrorInfo
pdh
PdhRemoveCounter
PdhCollectQueryData
PdhAddEnglishCounterW
PdhCloseQuery
PdhGetFormattedCounterValue
PdhOpenQueryA
powrprof
CallNtPowerInformation
secur32
InitializeSecurityContextW
ApplyControlToken
AcceptSecurityContext
FreeContextBuffer
DecryptMessage
AcquireCredentialsHandleA
QueryContextAttributesW
FreeCredentialsHandle
DeleteSecurityContext
EncryptMessage
uxtheme
SetWindowTheme
bcrypt
BCryptGenRandom
ws2_32
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
closesocket
WSAGetLastError
WSAIoctl
setsockopt
WSASend
send
recv
shutdown
getsockopt
ioctlsocket
connect
bind
WSASocketW
getsockname
getpeername
crypt32
CertDuplicateCertificateChain
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateContext
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertDuplicateStore
CertOpenStore
CertCloseStore
CertFreeCertificateChain
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
api-ms-win-crt-math-l1-1-0
__setusermatherr
pow
trunc
round
floor
api-ms-win-crt-string-l1-1-0
strcpy_s
_wcsicmp
wcslen
wcsncmp
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
_set_new_mode
free
malloc
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_crt_atexit
_register_thread_local_exe_atexit_callback
terminate
abort
_c_exit
_cexit
_initialize_narrow_environment
_exit
_configure_narrow_argv
exit
_set_app_type
__p___argc
_seh_filter_exe
_initterm_e
_initterm
_get_initial_narrow_environment
__p___argv
_initialize_onexit_table
api-ms-win-crt-convert-l1-1-0
wcstol
_ultow_s
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ