CrosshairX Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CrosshairX Launcher.exe
Size

1.7MB
MD5

49112c754569ca00c38b5d79762819f2
SHA1

393ffe761646549c101690b211f0aba95d94e879
SHA256

cb0cab4250dce9fcdc57b6d7e430b772ef9922a0d080ba3b423867505b7ca4c8
SHA512

c233f8f49b31312621b083c53d3e632e24ea8f328f666ee2aa563966ce78da8ebfa7c7304b5a9f6900faab43fba6af56cdf3b7a23b069b3fed2e3385b23b4d81
SSDEEP

49152:pkqXfd+/9Aa46AUQ09dtJNoMbUdHeTRzkFa5LnHoY183W:pkqXf0FLtA30RNdbUdHe2ALN83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrosshairX Launcher.exe

Files

CrosshairX Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\zitwo\source\repos\ConsoleApp2\ConsoleApp1\obj\Debug\ConsoleApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ