quantum_launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

quantum_launcher.exe
Size

30.0MB
MD5

7a4a0ef3bf57374d90ae3179486ef941
SHA1

10f4ebc3ca47c5f171ba9542513b147b4c260d16
SHA256

62a5327470090d57005c977871ad17bdeb5e1cb1d9d5a049fb9ab877a633ae06
SHA512

e9389f1856f37c7698b7b12c45811ff1ec076cfa2bcb08077c1c09661a429a91d0dc6849d1c5b38927ec05a973738b47dd43c7e831f43c5bc4451fea63589627
SSDEEP

196608:C9TERfTm1jmbR8VgY2evOuiwit4p1Fh3WQ:COdtLCvOunit4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quantum_launcher.exe

Files

quantum_launcher.exe
.exe windows:4 windows x64 arch:x64

09a7f08a753cbece9b70d783ffda2430

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

bcrypt

BCryptGenRandom

crypt32

CertAddCertificateContextToStore
CertAddEncodedCTLToStore
CertAddEncodedCertificateToStore
CertCloseStore
CertCreateCTLEntryFromCertificateContextProperties
CertCreateCertificateContext
CertDeleteCertificateFromStore
CertDuplicateCertificateChain
CertDuplicateCertificateContext
CertDuplicateStore
CertEnumCertificatesInStore
CertFreeCTLContext
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertOpenStore
CertSetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertVerifyTimeValidity
CryptAcquireCertificatePrivateKey
CryptBinaryToStringA
CryptDecodeObjectEx
CryptEncodeObjectEx
CryptHashCertificate
CryptMsgEncodeAndSignCTL
CryptStringToBinaryA
PFXExportCertStore
PFXImportCertStore

d3dcompiler_47

D3DCompile

dwmapi

DwmEnableBlurBehindWindow

imm32

ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow

ncrypt

NCryptFreeObject

ole32

CoCreateGuid
CoCreateInstance
CoIncrementMTAUsage
CoInitializeEx
CoTaskMemFree
CoUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
SysStringLen

opengl32

wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetProcAddress
wglMakeCurrent

secur32

AcceptSecurityContext
AcquireCredentialsHandleA
ApplyControlToken
DecryptMessage
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextW
QueryContextAttributesW

userenv

GetUserProfileDirectoryW

uxtheme

SetWindowTheme

ws2_32

WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSAIoctl
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendMsg
WSASendTo
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

advapi32

CryptAcquireContextW
CryptDestroyKey
CryptImportKey
CryptReleaseContext
ImpersonateAnonymousToken
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExA
RevertToSelf
SystemFunction036

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateRectRgn
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceCaps
GetObjectW
GetPixelFormat
SelectObject
SetPixelFormat
SwapBuffers

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
CancelIo
CancelIoEx
CloseHandle
CompareStringOrdinal
ConnectNamedPipe
CopyFileExW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateNamedPipeW
CreateProcessW
CreateSymbolicLinkW
CreateThread
CreateToolhelp32Snapshot
CreateWaitableTimerExW
DeleteCriticalSection
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FlushViewOfFile
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeInfo
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessId
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetUserPreferredUILanguages
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitializeCriticalSection
InitializeProcThreadAttributeList
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LocalFree
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReadFileEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
RemoveDirectoryW
RemoveVectoredExceptionHandler
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleMode
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetThreadErrorMode
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnmapViewOfFile
UpdateProcThreadAttribute
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteFileEx
__C_specific_handler
lstrlenW

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_assert
_cexit
_commode
_errno
_fmode
_fpreset
_initterm
_lock
_onexit
_unlock
abort
acos
acosf
atan2
atan2f
calloc
ceil
ceilf
clock
cos
cosf
exit
expf
fflush
floor
floorf
fmod
fmodf
fprintf
fputc
free
frexp
fwrite
localeconv
log
malloc
memcmp
memcpy
memmove
memset
pow
powf
qsort
signal
sin
sinf
strerror
strlen
strncmp
tan
tanf
vfprintf
wcslen
_hypot

ntdll

NtCancelIoFileEx
NtCreateFile
NtDeviceIoControlFile
NtReadFile
NtWriteFile
RtlNtStatusToDosError

shell32

DragFinish
DragQueryFileW
SHGetKnownFolderPath

user32

AdjustWindowRectEx
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CloseTouchInputHandle
CountClipboardFormats
CreateIcon
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageW
EmptyClipboard
EnableMenuItem
EnumClipboardFormats
EnumDisplayMonitors
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardFormatNameW
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageW
GetMonitorInfoW
GetRawInputData
GetRawInputDeviceInfoW
GetSystemMenu
GetSystemMetrics
GetTouchInputInfo
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRgn
IsIconic
IsProcessDPIAware
IsWindowVisible
KillTimer
LoadCursorW
LoadImageW
MapVirtualKeyExW
MapVirtualKeyW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
OpenClipboard
PeekMessageW
PostMessageW
RedrawWindow
RegisterClassExA
RegisterClassExW
RegisterClipboardFormatW
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
ScreenToClient
SendInput
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetForegroundWindow
SetMenuDefaultItem
SetTimer
SetWindowDisplayAffinity
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
ToUnicode
ToUnicodeEx
TrackMouseEvent
TrackPopupMenu
TranslateMessage
ValidateRect

Sections

.text
Size: 13.7MB - Virtual size: 13.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 930KB - Virtual size: 930KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 632KB - Virtual size: 631KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/47
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/86
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/108
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09a7f08a753cbece9b70d783ffda2430

Headers

DLL Characteristics

File Characteristics

Imports

bcrypt

crypt32

d3dcompiler_47

dwmapi

imm32

ncrypt

ole32

oleaut32

opengl32

secur32

userenv

uxtheme

ws2_32

advapi32

gdi32

kernel32

msvcrt

ntdll

shell32

user32

Sections

.text Size: 13.7MB - Virtual size: 13.7MB

.data Size: 20KB - Virtual size: 20KB

.rdata Size: 3.3MB - Virtual size: 3.3MB

.pdata Size: 353KB - Virtual size: 352KB

.xdata Size: 930KB - Virtual size: 930KB

.bss Size: - Virtual size: 3KB

.idata Size: 18KB - Virtual size: 18KB

.CRT Size: 512B - Virtual size: 128B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 96KB - Virtual size: 96KB

/4 Size: 4KB - Virtual size: 4KB

/19 Size: 632KB - Virtual size: 631KB

/35 Size: 1.2MB - Virtual size: 1.2MB

/47 Size: 26KB - Virtual size: 25KB

/61 Size: 406KB - Virtual size: 406KB

/73 Size: 8KB - Virtual size: 7KB

/86 Size: 1.3MB - Virtual size: 1.3MB

/97 Size: 78KB - Virtual size: 77KB

/108 Size: 512B - Virtual size: 324B

/124 Size: 580KB - Virtual size: 580KB

.text
Size: 13.7MB - Virtual size: 13.7MB

.data
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3.3MB - Virtual size: 3.3MB

.pdata
Size: 353KB - Virtual size: 352KB

.xdata
Size: 930KB - Virtual size: 930KB

.bss
Size: - Virtual size: 3KB

.idata
Size: 18KB - Virtual size: 18KB

.CRT
Size: 512B - Virtual size: 128B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 96KB - Virtual size: 96KB

/4
Size: 4KB - Virtual size: 4KB

/19
Size: 632KB - Virtual size: 631KB

/35
Size: 1.2MB - Virtual size: 1.2MB

/47
Size: 26KB - Virtual size: 25KB

/61
Size: 406KB - Virtual size: 406KB

/73
Size: 8KB - Virtual size: 7KB

/86
Size: 1.3MB - Virtual size: 1.3MB

/97
Size: 78KB - Virtual size: 77KB

/108
Size: 512B - Virtual size: 324B

/124
Size: 580KB - Virtual size: 580KB