VSLauncher_[0MB]_[1][.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VSLauncher_[0MB]_[1].exe
Size 281KB
Sample240610-ejezcacd67
SHA256 87048cff2227d2901314760618d23917cfbc5cc15fc22dc355e803c5ee5fb211
MD5 7a7bb3b0e57e4fb32c57b74e78e657ad
SHA1 f1dee943b1b6238b1466d83325c4099d189cd4b5
SHA512 ef0c9985b640189ed9991b301cfbf9771df961e1bf67bf68c5833667db53977c9745bcfb42e059d8bb5bcd7a88253a715d86f65612dccc33514ccda3baaf24c2
SSDEEP 3072:Dawahjy56hh65Ndqp9ikqtPLy0gJmU/3j41IGvQC2mCILuCW+VoNDRUiuDhJoueT:dLlavj41nDlDOO9uunwiLWyIE2n
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

VSLauncher_[0MB]_[1].exe

.exe 281KB

VSLauncher_[0MB]_[1].exe

IMPHASH 61cdf76393ba81a66e782c6a30558888
SHA256 87048cff2227d2901314760618d23917cfbc5cc15fc22dc355e803c5ee5fb211
MD5 7a7bb3b0e57e4fb32c57b74e78e657ad
SHA1 f1dee943b1b6238b1466d83325c4099d189cd4b5
SHA512 ef0c9985b640189ed9991b301cfbf9771df961e1bf67bf68c5833667db53977c9745bcfb42e059d8bb5bcd7a88253a715d86f65612dccc33514ccda3baaf24c2
SSDEEP 3072:Dawahjy56hh65Ndqp9ikqtPLy0gJmU/3j41IGvQC2mCILuCW+VoNDRUiuDhJoueT:dLlavj41nDlDOO9uunwiLWyIE2n
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

41:07:31:b9:03:b4:64:ef:55:3b:59:f5:04:b2:23:11:69:2d:16:05:7b:b2:10:2a:c1:f5:b8:fb:ef:26:39:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 7, 2024

Minor OS version

Major OS version

Entry point

104768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\dbs\el\ddvsm\out\binaries\x86ret\bin\i386\VSLauncher.pdb

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegQueryInfoKeyW RegDeleteKeyA RegEnumKeyExA RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegDeleteValueA EventRegister EventWrite EventProviderEnabled EventUnregister

kernel32

HeapFree HeapAlloc RaiseException HeapDestroy HeapSize WideCharToMultiByte GetEnvironmentVariableW FreeLibrary GetProcAddress GetModuleHandleA lstrcmpiA IsDBCSLeadByte SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionEx GetCommandLineW DecodePointer FindFirstFileW FindNextFileW FindClose ExpandEnvironmentStringsW GetFullPathNameW GetLongPathNameW GetStartupInfoW GetStdHandle SetEnvironmentVariableW CreateProcessW WaitForSingleObject CompareFileTime LockResource FindResourceExW FindResourceW CloseHandle GetUserDefaultUILanguage GetFileAttributesW lstrlenA WriteConsoleW ReadFile FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP FindNextFileA FindFirstFileExA OutputDebugStringW LCMapStringW UnmapViewOfFile GetLastError MultiByteToWideChar MapViewOfFile CreateFileMappingA GetFileSize CreateFileW SetErrorMode IsValidCodePage GetProcessHeap HeapReAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetSystemInfo VirtualAlloc VirtualProtect VirtualQuery WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetACP GetStringTypeW GetFileType

user32

LoadStringW CharPrevW GetWindowRect SystemParametersInfoA SetWindowPos MessageBoxW CharNextA DialogBoxParamW GetDlgItem SetDlgItemTextW SendDlgItemMessageW SendMessageA EndDialog

ole32

CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc CoCreateInstance CoInitialize CoUninitialize

oleaut32

SysAllocStringLen SysStringLen SysStringByteLen SysAllocStringByteLen SysAllocString SysFreeString VarUI4FromStr

shell32

ShellExecuteExW CommandLineToArgvW

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW