Static task
static1
Behavioral task
behavioral1
Sample
Valorant_DMA_Launcher_R2024.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Valorant_DMA_Launcher_R2024.exe
Resource
win10v2004-20240709-en
General
-
Target
Valorant_DMA_Launcher_R2024.exe
-
Size
97.4MB
-
MD5
e89cc79e9922675d6c834cf6fb0e3ce3
-
SHA1
f796d99ddbc2b0391c1974a51ef9c867747edb6f
-
SHA256
db90c31a0f39f4ec0048dcc4ad19f92108dd54a7c58966a8ccb29e7ed6fbedfb
-
SHA512
ee7e25cc3adf09ab89f14d2798bc6746d67a56abc65c5908e01bb46d3bbe6977311b341638f8146427f2284362d9a32bb39320699bedae05cea4cc4c3cdda461
-
SSDEEP
1572864:lyV+8NLCkE6XokIDORjPcxhjTn/i9DPbmasumehcDLtnIrK+48BUWz4g/X6pc9:lOdYpy0xhfaNzme6DLVIuT8BJz4gSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Valorant_DMA_Launcher_R2024.exe
Files
-
Valorant_DMA_Launcher_R2024.exe.exe windows:6 windows x64 arch:x64
80abcf81bb96d33282fc14977a19e444
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
RegisterClassExA
gdi32
GetDeviceCaps
advapi32
OpenSCManagerA
shell32
SHGetSpecialFolderPathA
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
d3d11
D3D11CreateDeviceAndSwapChain
d3dx11_43
D3DX11CreateTextureFromMemory
dwmapi
DwmExtendFrameIntoClientArea
winhttp
WinHttpCloseHandle
version
GetFileVersionInfoA
imm32
ImmSetCandidateWindow
d3dcompiler_43
D3DCompile
vcruntime140
memchr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-convert-l1-1-0
atol
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-filesystem-l1-1-0
remove
api-ms-win-crt-math-l1-1-0
sqrtf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
strncmp
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 837KB - Virtual size: 837KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86.2MB - Virtual size: 86.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.llvm30 Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.llvm31 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llvm32 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ