SolarioPlayerLauncher[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SolarioPlayerLauncher.exe
Size

2.0MB
MD5

3533d47132901583b3c69cccf86d5428
SHA1

b374ab1f3aacbd39072de0bf3b606254e2377b92
SHA256

3130034f0348869fbc4b49511c4ac6bcea020f251d122f6ddda200b422bf4bcb
SHA512

1af810210f407af9966e7aaddc59b78ba07b4e6b3ff3744c1e9225615bd299a79d5746c3b6b8d8d77219703dbfd744696a7eedfaa68c4b9b45e423ba2816a541
SSDEEP

49152:h9DY5e5L9CsgV7Jk/WZ+6QNGcr6x9jqd2mFdI+8kZ8i51:3Aep9XgV7Jk/W06QNGcr6x9+bAi5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SolarioPlayerLauncher.exe

Files

SolarioPlayerLauncher.exe
.exe windows:6 windows x86 arch:x86

412b014494b453070cdcb70f6e4831a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

api-ms-win-core-synch-l1-2-0

WakeByAddressAll
WaitOnAddress
WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

lstrlenW
AddVectoredExceptionHandler
SetThreadStackGuarantee
HeapFree
HeapReAlloc
SystemTimeToFileTime
GetSystemTimePreciseAsFileTime
SystemTimeToTzSpecificLocalTime
GetConsoleMode
GetFileType
GetFileInformationByHandleEx
SetConsoleCursorPosition
SetConsoleMode
SwitchToThread
GetConsoleOutputCP
FlushFileBuffers
HeapSize
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
SetLastError
GetFinalPathNameByHandleW
GetQueuedCompletionStatusEx
LCMapStringW
CompareStringW
CreateIoCompletionPort
SetFileCompletionNotificationModes
Sleep
GetModuleHandleA
GetProcAddress
TlsGetValue
GetConsoleScreenBufferInfo
GetStdHandle
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
WideCharToMultiByte
GetCPInfo
GetOEMCP
GetACP
GetCommandLineW
FindFirstFileExW
GetExitCodeProcess
WaitForSingleObject
GetSystemInfo
CloseHandle
FindClose
FindFirstFileW
DecodePointer
GetCommandLineA
SetHandleInformation
GetModuleHandleExW
GetCurrentThread
TlsSetValue
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
MultiByteToWideChar
WriteConsoleW
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceFrequency
GetModuleHandleW
FormatMessageW
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
CreateMutexA
ReleaseMutex
GetEnvironmentVariableW
GetModuleFileNameW
CreateFileW
SetFileInformationByHandle
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
FindNextFileW
CreateDirectoryW
WriteFile
LoadLibraryExW
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
DuplicateHandle
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateNamedPipeW
CreateThread
ReadFileEx
SleepEx
WriteFileEx
ExitProcess
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
GetCurrentDirectoryW
RtlCaptureContext
PostQueuedCompletionStatus
DeleteCriticalSection
LeaveCriticalSection
GetLastError
EnterCriticalSection
DeleteFileW
IsValidCodePage
EncodePointer
RtlUnwind
RaiseException
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

crypt32

CertCloseStore
CertDuplicateStore
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertDuplicateCertificateContext
CertOpenStore
CertFreeCertificateContext
CertDuplicateCertificateChain

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

ws2_32

shutdown
WSASend
ioctlsocket
setsockopt
connect
getsockopt
bind
closesocket
getaddrinfo
freeaddrinfo
WSAIoctl
send
WSAStartup
WSACleanup
getsockname
WSAGetLastError
getpeername
recv
WSASocketW

ntdll

RtlNtStatusToDosError
NtDeviceIoControlFile
NtCreateFile
NtReadFile
NtCancelIoFileEx
NtWriteFile

secur32

InitializeSecurityContextW
DecryptMessage
DeleteSecurityContext
FreeCredentialsHandle
FreeContextBuffer
QueryContextAttributesW
AcquireCredentialsHandleA
EncryptMessage
AcceptSecurityContext
ApplyControlToken

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

412b014494b453070cdcb70f6e4831a2

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

advapi32

crypt32

shell32

ole32

ws2_32

ntdll

secur32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 642KB - Virtual size: 641KB

.data Size: 6KB - Virtual size: 8KB

.rsrc Size: 67KB - Virtual size: 67KB

.reloc Size: 46KB - Virtual size: 46KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 642KB - Virtual size: 641KB

.data
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 67KB - Virtual size: 67KB

.reloc
Size: 46KB - Virtual size: 46KB