CMLauncher[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

CMLauncher.exe
Size

14.8MB
MD5

6eb5bd5c5c219d80cf35268b21141b7d
SHA1

eb9eab739f70258c1c5078740836749f86d0433a
SHA256

507bb3c962c233257999cb65352cec684b7dd611f689eca43c8db4452c84f596
SHA512

9ede414f6bf8937065c44b75bf3139aac76bab3ba3e1006d25703d3469c07a87112e59c1b277adb1214790c61bdc93f566429b0de0653400d077834d46a3ae94
SSDEEP

393216:1gaOqdDXyhZvYZoErg8rnKFpiJvwuVHB/AaSu+lE0on:XXdDSvYS8rnKFpiJvwuVpDeY

Score

1^/10

Malware Config

Signatures

Files

CMLauncher.exe
.exe windows:6 windows x86 arch:x86

1dd712b8807242d364e283c983287202

Code Sign

5e:fa:e9:0f:a7:79:89:8a:4f:5c:b1:d8:31:54:7b:28
Certificate

Issuer

CN=ClientModGame

Not Before

31-12-1999 15:00

Not After

31-12-2035 15:00

Subject

CN=ClientModGame

Extended Key Usages

ExtKeyUsageCodeSigning

b6:ca:f5:75:28:a7:85:4b:8c:c7:a3:f8:3c:40:08:00:f5:05:83:d4:83:28:88:69:01:93:ca:13:04:81:d7:ad
Signer

Actual PE Digest

b6:ca:f5:75:28:a7:85:4b:8c:c7:a3:f8:3c:40:08:00:f5:05:83:d4:83:28:88:69:01:93:ca:13:04:81:d7:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\_SOURCE_CODE\ClientModLauncher\Launcher\Release\CMLauncher.pdb

Imports

shlwapi

StrFormatKBSizeA
PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

imagehlp

SymFromAddr
StackWalk64

ntdll

RtlUnwind
RtlNtStatusToDosError
VerSetConditionMask

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA
timeBeginPeriod

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

ws2_32

WSARecv
htonl
gethostbyname
ntohs
ntohl
getsockname
WSACleanup
WSAGetLastError
WSAStartup
socket
closesocket
recv
getsockopt
setsockopt
shutdown
WSASendTo
WSARecvFrom
WSAAddressToStringW
WSAStringToAddressW
gethostname
__WSAFDIsSet
WSAIoctl
WSASend
send
inet_pton
inet_ntop
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSASetLastError
getservbyname
getservbyport
gethostbyaddr
inet_ntoa
inet_addr
htons
sendto
listen
bind
recvfrom
select
connect
getaddrinfo
WSASocketW
getpeername
ioctlsocket
accept
freeaddrinfo

user32

ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
GetSystemMenu
LoadMenuW
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongA
DrawStateA
GetKeyNameTextA
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
LoadImageW
IntersectRect
InvalidateRect
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
PostQuitMessage
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsMenu
GetClassInfoExA
CharUpperBuffA
CallWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
DefFrameProcA
DefMDIChildProcA
RegisterClipboardFormatA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
TrackMouseEvent
SendMessageA
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsChild
DestroyWindow
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
IsIconic
BringWindowToTop
SetFocus
GetKeyState
GetCapture
SetCapture
ReleaseCapture
IsWindowUnicode
GetForegroundWindow
SetForegroundWindow
GetDC
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
ReleaseDC
SetWindowTextW
GetClientRect
AdjustWindowRectEx
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
WindowFromPoint
GetWindowLongW
SetWindowLongA
SetWindowLongW
LoadCursorA
LoadIconA
MonitorFromWindow
GetMonitorInfoA
EnumDisplayMonitors
SetProcessDPIAware
IsWindowVisible
FindWindowExA
GetWindowThreadProcessId
EnumDisplaySettingsA
EnumDisplayDevicesA
TranslateMessage
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
GetDesktopWindow
RegisterClassA
FindWindowA
EnumWindows
GetClassNameA
LoadStringA
MessageBoxA
GetMenuStringA
GetMenuState
CheckMenuItem
IsDialogMessageA
SendDlgItemMessageA
CheckDlgButton
GetDlgItem
MoveWindow
IsWindow
GetScrollPos
SetScrollPos
RealChildWindowFromPoint
GetWindow
PtInRect
GetWindowRect
SetWindowTextA
GetFocus
GetDlgCtrlID
CharUpperA
DestroyIcon
CallNextHookEx
SetWindowsHookExA
ValidateRect
GetActiveWindow
GetMessageA
GetWindowTextLengthA
GetWindowTextA
GetSysColorBrush
GetSysColor
GetSystemMetrics
GetLastActivePopup
GetParent
GetWindowLongA
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
GetClassInfoA
RemoveMenu
AppendMenuA
InsertMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount

kernel32

CreateHardLinkW
GetFinalPathNameByHandleW
CancelIo
GetConsoleMode
GetFileType
SetCurrentDirectoryW
ExitProcess
GetFullPathNameW
CreateProcessW
WriteConsoleW
ReadConsoleW
CreateThread
InitOnceBeginInitialize
InitOnceComplete
GetDiskFreeSpaceExW
GetFileAttributesExW
CopyFileW
AreFileApisANSI
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
GetLogicalProcessorInformation
CreateWaitableTimerA
GetSystemDirectoryA
GetModuleHandleExW
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
SetConsoleMode
ReadConsoleA
MoveFileExA
CompareFileTime
RemoveDirectoryW
MoveFileExW
DeviceIoControl
GetExitCodeThread
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetLocaleInfoEx
FindFirstFileExW
GetStringTypeW
LCMapStringEx
CompareStringEx
OutputDebugStringW
ExitThread
DeleteFileW
GetFileInformationByHandle
CreateFileW
WaitForSingleObjectEx
AcquireSRWLockShared
TryAcquireSRWLockExclusive
FreeLibraryAndExitThread
GetDriveTypeW
SetConsoleCtrlHandler
GetConsoleOutputCP
SetStdHandle
GetDateFormatW
CreateDirectoryExW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
IsValidCodePage
CreatePipe
GetEnvironmentVariableA
PeekNamedPipe
GetQueuedCompletionStatus
CreateIoCompletionPort
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceFrequency
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetLastError
TlsAlloc
TlsFree
LocalFree
FormatMessageA
FormatMessageW
GetCurrentProcessId
GetProcessId
QueryPerformanceCounter
Sleep
GetCurrentThread
SetThreadPriority
GetLocaleInfoA
GetUserDefaultUILanguage
CloseHandle
GetExitCodeProcess
OpenProcess
GetModuleFileNameA
SetLastError
GetCurrentProcess
VirtualProtect
GetPrivateProfileStringA
WritePrivateProfileStringA
GetSystemInfo
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
DuplicateHandle
GetSystemTime
SystemTimeToFileTime
CreateFileA
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Thread32First
Thread32Next
InitializeCriticalSectionEx
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
DeleteCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
GetFileAttributesA
SetFileAttributesA
FreeLibrary
CreateEventA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
SleepEx
CreateMutexA
CreateEventW
WaitForMultipleObjects
QueueUserAPC
TerminateThread
TlsGetValue
TlsSetValue
SetSearchPathMode
VerifyVersionInfoW
TerminateProcess
GetModuleFileNameW
GetModuleHandleW
K32GetProcessImageFileNameA
Process32First
Process32Next
VirtualAlloc
VirtualFree
VirtualQuery
HeapCreate
GetThreadContext
SetThreadContext
FlushInstructionCache
PostQueuedCompletionStatus
GetLocalTime
GetCommandLineA
GetFileAttributesW
SetFileAttributesW
OutputDebugStringA
CreateProcessA
IsWow64Process
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
K32EmptyWorkingSet
K32GetProcessMemoryInfo
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
GlobalSize
MulDiv
CopyFileA
LoadLibraryW
InitializeCriticalSection
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
CompareStringA
lstrcmpA
GlobalGetAtomNameA
FileTimeToSystemTime
GlobalAddAtomA
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetVolumeInformationA
LoadLibraryExA
lstrcmpiA
GlobalFlags
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
FindResourceA
GlobalFindAtomA
GetVersionExA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetLocaleInfoW
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
GetACP
lstrcpyA
FindResourceExW
GetWindowsDirectoryA
VerifyVersionInfoA
GetTempPathA
GetTickCount64
GetProfileIntA
SearchPathA
GetTempFileNameA
GetTickCount
WakeAllConditionVariable
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
FreeEnvironmentStringsW
ReleaseSRWLockShared
SwitchToThread
RtlCaptureContext
GetEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCommandLineW
SetFilePointerEx
CreateDirectoryW
GetStdHandle

gdi32

SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
DeleteObject
CreateCompatibleDC
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
CreateRectRgn
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
GetTextFaceA
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline

mswsock

GetAcceptExSockaddrs
AcceptEx

dbghelp

MiniDumpWriteDump

ole32

CreateStreamOnHGlobal
CoInitialize
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
DoDragDrop
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoDisconnectObject

oleaut32

LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
VariantCopy
VarBstrFromDate
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocString

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
GetTokenInformation
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptEnumProvidersA
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
CryptGetHashParam
CryptHashData
GetSecurityInfo

shell32

SHGetFolderPathW
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHAppBarMessage

uxtheme

CloseThemeData
DrawThemeBackground
GetThemeColor
DrawThemeParentBackground
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
OpenThemeData
GetCurrentThemeName
GetThemePartSize
DrawThemeText

wininet

InternetCanonicalizeUrlA

gdiplus

GdipGetImageHeight
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusShutdown
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImagePalette
GdipGetImagePixelFormat
GdipDrawImageI
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

bcrypt

BCryptDeriveKeyPBKDF2
BCryptDestroyHash
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDestroyKey
BCryptCreateHash
BCryptHashData
BCryptFinishHash

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreA

iphlpapi

CancelMibChangeNotify2
NotifyUnicastIpAddressChange

wldap32

ord46
ord217
ord301
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord143

Exports

Exports

AmdPowerXpressRequestHighPerformance
GetInterface
NvOptimusEnablement

Sections

.text
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 577KB - Virtual size: 707KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 471KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dd712b8807242d364e283c983287202

Code Sign

5e:fa:e9:0f:a7:79:89:8a:4f:5c:b1:d8:31:54:7b:28Certificate

Extended Key Usages

b6:ca:f5:75:28:a7:85:4b:8c:c7:a3:f8:3c:40:08:00:f5:05:83:d4:83:28:88:69:01:93:ca:13:04:81:d7:adSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

imagehlp

ntdll

imm32

winmm

version

ws2_32

user32

kernel32

gdi32

mswsock

dbghelp

ole32

oleaut32

msimg32

winspool.drv

advapi32

shell32

uxtheme

wininet

gdiplus

oleacc

bcrypt

crypt32

iphlpapi

wldap32

Exports

Exports

Sections

.text Size: 10.2MB - Virtual size: 10.2MB

.rdata Size: 3.3MB - Virtual size: 3.3MB

.data Size: 577KB - Virtual size: 707KB

.cdata Size: 1024B - Virtual size: 516B

_RDATA Size: 10KB - Virtual size: 9KB

.rsrc Size: 202KB - Virtual size: 201KB

.reloc Size: 471KB - Virtual size: 471KB

5e:fa:e9:0f:a7:79:89:8a:4f:5c:b1:d8:31:54:7b:28
Certificate

b6:ca:f5:75:28:a7:85:4b:8c:c7:a3:f8:3c:40:08:00:f5:05:83:d4:83:28:88:69:01:93:ca:13:04:81:d7:ad
Signer

.text
Size: 10.2MB - Virtual size: 10.2MB

.rdata
Size: 3.3MB - Virtual size: 3.3MB

.data
Size: 577KB - Virtual size: 707KB

.cdata
Size: 1024B - Virtual size: 516B

_RDATA
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 202KB - Virtual size: 201KB

.reloc
Size: 471KB - Virtual size: 471KB