NosBreakLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NosBreakLauncher.exe
Size

6.5MB
MD5

dfb9f337141cd535f46c5ea3677d88c1
SHA1

da5300fc283f041110b219df830644ad680c4f79
SHA256

8dfaa4cabc8ad88afad2da610906b265b9ee5c8dba26ce5c6f4e84f565db5b87
SHA512

6555972ebfa6fdb96ea0cae9550bb1161ebd35352293d3c504062913524860679f0c59ed0dcaec11ff9877c1870a8cb153edd47fd75c77140e33aa2dbc55f125
SSDEEP

196608:HqQ/OGX4m07jYwcNQpOhVw7vdfytKmcR:Hqdm6dBQ0pfyoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NosBreakLauncher.exe

Files

NosBreakLauncher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\demence\Desktop\Launcher\NostaleLauncher\obj\Release\NosBreakLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ