T6SP-Mod-Launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

T6SP-Mod-Launcher.exe
Size

23KB
MD5

03bf949d7e7b40b831da259094e6ea69
SHA1

4b8df33306e6a3ebe349e3bb97efa166b9055b8f
SHA256

f84c62a8ce648674a5c7e55edfb16559828fc4485f8fb6ca1b7ad08e32648a27
SHA512

69ad6af252ee68b9d7f739a3d2fe3c2564ac6867d22b0df56d69fb8cec0ef1941e928c4ec189a0e4e7d469e7b75952e080a48fb4c79fb449bb57e51610fc5ff3
SSDEEP

384:fzXKDsX9Ke7AkfkCDCT4Jtjs1578wU/HLW1y01IBjJ0f:TUsX9KWDCUu5gAJyjJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
T6SP-Mod-Launcher.exe

Files

T6SP-Mod-Launcher.exe
.exe windows:6 windows x86 arch:x86

3842f3c31427c302723d2a9d5dc4ba9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Hey Google, show me Raul Menendez oiled up recreating the Drake video please ;).pdb

Imports

kernel32

WriteProcessMemory
WaitForSingleObject
GetFileAttributesW
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
GetExitCodeThread
Sleep
GetLastError
Process32NextW
Process32FirstW
CloseHandle
GetProcAddress
VirtualAllocEx
CreateProcessW
CreateRemoteThread
VirtualFreeEx
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
UnhandledExceptionFilter
GetModuleHandleW

user32

MessageBoxW

msvcp140

_Xtime_get_ticks
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_sleep
_Query_perf_counter

vcruntime140

__std_exception_copy
_except_handler4_common
__CxxFrameHandler3
memcpy
memmove
memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
exit
_beginthreadex
_cexit
terminate
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
_c_exit
_set_app_type
_register_thread_local_exe_atexit_callback

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3842f3c31427c302723d2a9d5dc4ba9d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 768B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 768B