KFlauncher[.]exe[.]vir

General

Target
KFlauncher.exe.vir
Size 1020KB
Sample240621-q5plfssdkf
SHA256 85dea135eae28aba3898e7e7efc7a49cd94d0c9ab32a3801e299b0a4cd9e5df3
MD5 66a64d08b8b0516272954409cf9193a9
SHA1 502c84b62dc7a9d26be810e904a5c3b814fe239f
SHA512 ac8efcfe1f94206c3e65c7da8fc1b29c2bbcde3cfdda518ab925027992974e080184c2062668fa7aa1edec5cf2a5268db02202e286de504db10a0ff21bfad85b
SSDEEP 12288:EdP4gv7Q4HHJPU/i0acOMQgtzh7fNZ+2uy/R22gQDd:EdP4G/HJBcb1h7fLuy//D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KFlauncher.exe.vir

File Explorer

KFlauncher.exe.vir

.exe 1020KB

KFlauncher.exe.vir

IMPHASH 163b50eacfd1e6d0afa3bb948206dff3
SHA256 85dea135eae28aba3898e7e7efc7a49cd94d0c9ab32a3801e299b0a4cd9e5df3
MD5 66a64d08b8b0516272954409cf9193a9
SHA1 502c84b62dc7a9d26be810e904a5c3b814fe239f
SHA512 ac8efcfe1f94206c3e65c7da8fc1b29c2bbcde3cfdda518ab925027992974e080184c2062668fa7aa1edec5cf2a5268db02202e286de504db10a0ff21bfad85b
SSDEEP 12288:EdP4gv7Q4HHJPU/i0acOMQgtzh7fNZ+2uy/R22gQDd:EdP4G/HJBcb1h7fLuy//D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44475

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

Polyline

user32

DestroyWindow OffsetRect

advapi32

DeleteAce GetNumberOfEventLogRecords

kernel32

SetStdHandle WriteConsoleW GetProcessHeap CreateFileW HeapSize CloseHandle WaitForSingleObject CreateThread VirtualAlloc WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter ReleaseSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess HeapAlloc HeapFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

Sharing