C:\code\launcher
Static task
static1
Behavioral task
behavioral1
Sample
launcher_v2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
launcher_v2.exe
Resource
win10v2004-20240802-en
General
-
Target
launcher_v2.exe
-
Size
300KB
-
MD5
3d71a3c1602a332558610eb9358fe27d
-
SHA1
e9a13fbfd2f1504d6fa95dd6c9fb6fcfd817ef08
-
SHA256
98223b5812151a6d92784b6b55154305d0b2af874e5fccab847dd543897658d1
-
SHA512
1f36ea64849b77f3965d7163d787459daddc47e2d3b5a2465785008ab5b11e37c93871b54323ea4abf3c462c72c22f4768776025950f3aeb832685cc432b4934
-
SSDEEP
6144:+ZSTiTbXvDggUF3aY37/V3flsTa4pGQSPCS3akGK8z:+ZHHUZaY375fl2GtPCgiK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource launcher_v2.exe
Files
-
launcher_v2.exe.exe windows:6 windows x64 arch:x64
771b0a6dab9dde9028e100717f648c09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
CloseHandle
TerminateProcess
GetExitCodeProcess
CreateProcessA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
CreateThread
CreateDirectoryA
FindClose
Sleep
CreateFileA
GetFileSize
ReadFile
WriteFile
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
DeleteFileA
GetTempPathA
ExitThread
AssignProcessToJobObject
SetInformationJobObject
CreateJobObjectA
GetProcAddress
LoadLibraryA
GlobalUnlock
GlobalLock
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetFilePointerEx
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
VirtualQuery
FreeLibrary
RtlUnwindEx
GetModuleFileNameW
LoadLibraryExW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RtlPcToFileHeader
GetStdHandle
ExitProcess
GetModuleHandleExW
GetFileType
user32
OpenClipboard
CloseClipboard
GetClipboardData
GetKeyboardState
GetForegroundWindow
GetCursorPos
ScreenToClient
TranslateMessage
DispatchMessageA
PeekMessageA
RegisterClassA
CreateWindowExA
SetWindowPos
DefWindowProcA
DestroyWindow
LoadImageA
LoadCursorA
AdjustWindowRectEx
ShowWindow
PostQuitMessage
urlmon
URLDownloadToFileA
ws2_32
recv
WSAPoll
closesocket
connect
send
setsockopt
socket
WSAStartup
WSACleanup
getaddrinfo
freeaddrinfo
d2d1
ord1
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ