ALVR Launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ALVR Launcher.exe
Size

8.1MB
MD5

142d4e31cb2f25a1f28980f11e907a97
SHA1

ff2a8bec3bb663d25aa97fcb24442d08c7d03e9a
SHA256

bb5933b5c454d780b04fce998c6cb881d85a4d30c9c6484ef83e9e509fa6d052
SHA512

de5f4dd581f1d3224a37b5a556b58f33b7be3cd0f83544614ed836dac58475b875e1a2355314490798bc54fa845dd4770c2a8fe8733e180d0aeb84af10e3de64
SSDEEP

49152:gw2oWqc66v1PmQr+BFhY4Q2WbMTmj8VsWYCO2CG4o1HhaVv+FP3xHPR7m4nS22JW:uYY6I32C4O+FQMCnvmbu9p3t+ehyN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ALVR Launcher.exe

Files

ALVR Launcher.exe
.exe windows:6 windows x64 arch:x64

c88da7b8fb2440999ee09d209dde44ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

alvr_launcher.pdb

Imports

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WaitOnAddress
WakeByAddressAll

bcryptprimitives

ProcessPrng

bcrypt

BCryptGenRandom

advapi32

RegCloseKey
SystemFunction036
RegQueryValueExW
RevertToSelf
ImpersonateAnonymousToken
RegOpenKeyExW

kernel32

SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetFileInformationByHandleEx
AddVectoredExceptionHandler
GetSystemTimeAsFileTime
InitializeSListHead
SetThreadStackGuarantee
HeapReAlloc
CloseHandle
GetLastError
QueryPerformanceCounter
SwitchToThread
HeapFree
GetCurrentThread
FindClose
GetCurrentThreadId
WaitForSingleObject
UnhandledExceptionFilter
GetExitCodeProcess
GetSystemInfo
FindFirstFileW
GlobalFree
GlobalUnlock
SetHandleInformation
CreateSymbolicLinkW
GetProcessHeap
HeapAlloc
ExitProcess
ReadFile
MultiByteToWideChar
GlobalAlloc
GlobalLock
CancelIo
CreateEventW
GetOverlappedResult
WaitForMultipleObjects
WriteFileEx
SleepEx
ReadFileEx
CreateThread
CreateNamedPipeW
IsDebuggerPresent
GetProcAddress
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
GlobalSize
LoadLibraryW
DuplicateHandle
GetFileAttributesW
CreateProcessW
FreeLibrary
GetWindowsDirectoryW
SetThreadErrorMode
LoadLibraryExW
GetSystemDirectoryW
GetModuleFileNameW
CompareStringOrdinal
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileInformationByHandle
CreateDirectoryW
FindNextFileW
GetFullPathNameW
SetFileInformationByHandle
GetQueuedCompletionStatusEx
CreateFileW
GetEnvironmentVariableW
CreateIoCompletionPort
SetFileCompletionNotificationModes
SetLastError
GetFinalPathNameByHandleW
Sleep
GetModuleHandleA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
PostQueuedCompletionStatus
GetSystemTimePreciseAsFileTime
GetStdHandle
GetConsoleMode
ReleaseMutex
WriteConsoleW
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceFrequency
GetModuleHandleW
FormatMessageW
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
lstrlenW
GetCurrentProcessId
CreateMutexA
WideCharToMultiByte

oleaut32

SysAllocStringLen
SafeArrayPutElement
SysFreeString
SafeArrayCreateVector
SetErrorInfo
SysStringLen
GetErrorInfo

uiautomationcore

UiaLookupId
UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaReturnRawElementProvider
UiaHostProviderFromHwnd
UiaGetReservedNotSupportedValue

user32

ScreenToClient
CloseTouchInputHandle
GetWindowTextLengthW
MapVirtualKeyExW
GetKeyboardLayout
ToUnicodeEx
TrackMouseEvent
ShowWindow
GetSystemMenu
EnableMenuItem
SetWindowLongW
GetCursorPos
AdjustWindowRectEx
GetClipCursor
ClipCursor
ShowCursor
GetWindowTextW
RegisterWindowMessageA
SetCursorPos
SetWindowTextW
DefWindowProcW
GetWindowRect
SystemParametersInfoA
SetClipboardData
GetPropW
GetForegroundWindow
GetTouchInputInfo
CallWindowProcW
GetWindowLongW
ReleaseCapture
CreateIcon
SetCapture
MonitorFromRect
SetWindowLongPtrW
RemovePropW
ClientToScreen
FlashWindowEx
OpenClipboard
SetCursor
LoadCursorW
GetMenu
CloseClipboard
SetPropW
EmptyClipboard
RegisterRawInputDevices
IsClipboardFormatAvailable
SetForegroundWindow
SendInput
CreateWindowExW
RegisterClassExW
MonitorFromPoint
GetClipboardData
DestroyIcon
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
IsProcessDPIAware
GetAsyncKeyState
MonitorFromWindow
GetKeyboardState
ReleaseDC
GetActiveWindow
RegisterTouchWindow
InvalidateRgn
SetWindowPos
SetWindowDisplayAffinity
MapVirtualKeyW
ValidateRect
GetRawInputData
RedrawWindow
DispatchMessageW
TranslateMessage
KillTimer
SetTimer
PeekMessageW
GetMessageW
GetKeyState
DestroyWindow
GetClassNameW
GetMonitorInfoW
EnumDisplayMonitors
GetClassInfoExW
PostMessageW
GetDC
GetWindowLongPtrW
IsIconic
GetClientRect
SendMessageW
GetSystemMetrics
CreateIconFromResourceEx

ntdll

NtWriteFile
RtlNtStatusToDosError
NtCancelIoFileEx
NtCreateFile
NtDeviceIoControlFile
NtReadFile

gdi32

GetDeviceCaps
DescribePixelFormat
ChoosePixelFormat
SetPixelFormat
CreateRectRgn
DeleteObject
SwapBuffers

opengl32

wglDeleteContext
wglGetProcAddress
wglGetCurrentContext
wglMakeCurrent
wglGetCurrentDC
wglShareLists
wglCreateContext

dwmapi

DwmEnableBlurBehindWindow

imm32

ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmAssociateContextEx

ole32

CoUninitialize
CoCreateInstance
RevokeDragDrop
OleInitialize
RegisterDragDrop
CoInitializeEx

shlwapi

AssocQueryStringW

ws2_32

closesocket
getpeername
freeaddrinfo
WSAStartup
WSACleanup
WSAIoctl
getaddrinfo
setsockopt
WSASend
ioctlsocket
WSAGetLastError
getsockname
connect
WSASocketW
send
recv
getsockopt
shutdown
bind

shell32

DragQueryFileW
DragFinish

uxtheme

SetWindowTheme

vcruntime140

__CxxFrameHandler3
_CxxThrowException
__current_exception
__C_specific_handler
memcmp
memmove
memset
memcpy
__current_exception_context

api-ms-win-crt-math-l1-1-0

floor
powf
sinf
roundf
__setusermatherr
cos
sin
floorf
ceilf
round
pow
expf
trunc
_hypotf
atan2f
cosf
exp2f
acosf
cbrtf
ceil

api-ms-win-crt-string-l1-1-0

strlen
wcslen

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_seh_filter_exe
_exit
exit
_initterm_e
_initterm
_set_app_type
terminate
_get_initial_narrow_environment
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c88da7b8fb2440999ee09d209dde44ee

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-core-synch-l1-2-0

bcryptprimitives

bcrypt

advapi32

kernel32

oleaut32

uiautomationcore

user32

ntdll

gdi32

opengl32

dwmapi

imm32

ole32

shlwapi

ws2_32

shell32

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 4.8MB - Virtual size: 4.8MB

.rdata Size: 3.0MB - Virtual size: 3.0MB

.data Size: 6KB - Virtual size: 7KB

.pdata Size: 171KB - Virtual size: 171KB

.rsrc Size: 82KB - Virtual size: 81KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 4.8MB - Virtual size: 4.8MB

.rdata
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 6KB - Virtual size: 7KB

.pdata
Size: 171KB - Virtual size: 171KB

.rsrc
Size: 82KB - Virtual size: 81KB

.reloc
Size: 17KB - Virtual size: 16KB