Static task
static1
Behavioral task
behavioral1
Sample
launcher.exe
Resource
win7-20240611-en
General
-
Target
launcher.exe
-
Size
18.7MB
-
MD5
0acf19965db8bae72e6f1c5340dae835
-
SHA1
d45dde66573a95438f490b0ed54d4b74d92395f8
-
SHA256
6f4116063989406b5693d9ca3e51ca88fbac7d974cb1b411d0219c665256fc2f
-
SHA512
8948732ec89e8a36ab8066c10ae6239c548d085901c2352f766a10d52ed1e11bf9580d52af11ced0455630661b9ae91d4b9fbcc3295b4f29685e02b7b3ffe383
-
SSDEEP
393216:YbUB1Gp17zeKX+FNLZvH1yKtNXxP0qkywY2/iM834:W2KuFNtH13NhzkywY2/s34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource launcher.exe
Files
-
launcher.exe.exe windows:6 windows x86 arch:x86
09a8388725e39ce537b73d009b62ba74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACloseEvent
crypt32
CryptUnprotectData
advapi32
CryptEncrypt
kernel32
GetConsoleMode
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
bcrypt
BCryptDestroyKey
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fptable Size: - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.M/; Size: - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bAT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2Ao Size: 18.5MB - Virtual size: 18.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ