midnight-scp-launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

midnight-scp-launcher.exe
Size

7.9MB
MD5

864fba0d653cd513271856b1249cd8b5
SHA1

6143f5c45a7f5523051fd4f122d407edad42de16
SHA256

c54bb3b8c5577e3bbb2c1023376c920fc10e46e4a08e89ba6e6b24f196efb6ae
SHA512

4ad49da880bef1336f07f508e00229d26cd34cfe3c7029c96b42104630be34d5890d814ef9aef5f6add81568750b1aeaae9c31646dc90f4398897cd5d2566474
SSDEEP

196608:qkDw7ULcWmPlclzKOke0sj5XfbDwrj4uBm+aRuxZY+ltubGQimNrIi:BKvOn0s1j+j45IMOkomNrI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
midnight-scp-launcher.exe

Files

midnight-scp-launcher.exe
.exe windows:6 windows x64 arch:x64

5f7044e3966bcd618da22c8c8c1283fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SystemParametersInfoA
CharUpperBuffW

advapi32

CopySid

shell32

ShellExecuteA

ole32

CoCreateInstance

oleaut32

VariantClear

userenv

UnloadUserProfile

ws2_32

connect

Sections

.text
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1006KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AwX
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VSJ
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.%V>
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f7044e3966bcd618da22c8c8c1283fb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

userenv

ws2_32

Sections

.text Size: - Virtual size: 248KB

.rdata Size: - Virtual size: 205KB

.data Size: - Virtual size: 1006KB

.pdata Size: - Virtual size: 13KB

_RDATA Size: - Virtual size: 348B

.AwX Size: - Virtual size: 5.2MB

.VSJ Size: 3KB - Virtual size: 2KB

.%V> Size: 7.9MB - Virtual size: 7.9MB

.reloc Size: 512B - Virtual size: 200B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 248KB

.rdata
Size: - Virtual size: 205KB

.data
Size: - Virtual size: 1006KB

.pdata
Size: - Virtual size: 13KB

_RDATA
Size: - Virtual size: 348B

.AwX
Size: - Virtual size: 5.2MB

.VSJ
Size: 3KB - Virtual size: 2KB

.%V>
Size: 7.9MB - Virtual size: 7.9MB

.reloc
Size: 512B - Virtual size: 200B

.rsrc
Size: 512B - Virtual size: 480B