xLauncher[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

xLauncher.rar
Size

309KB
MD5

8a018c240811dd58b57e488a111712fc
SHA1

485973bdd9882fa98e33165af8873192f97e0869
SHA256

e83e7ff0f529d5e6f96c4c00a81383e247c8dece3416b510d2bc813bebd9fbef
SHA512

a8816933600657f56b7116c8def556b92a67aac1ef8d602eaa350be92a76e6477be77522c6a301cc5017c8ca9cef7b7825259a6e2f9df9c2fee5659b2b899195
SSDEEP

6144:+VAcI2cPvThnP7usE+pg34C8NHAmDeQU9KuiQq+Y+40Xn2m6Rofv9MlD9Q7J5:+zI2c1SC7CiHQr9B9Y+32pux5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/xLauncher.exe

Files

xLauncher.rar
.rar

Password: 2024
xLauncher.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\g\obj\Re\ease\gqa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ