Static task
static1
Behavioral task
behavioral1
Sample
VLauncher_1.1.19_Windows.exe
Resource
win10v2004-20241007-en
General
-
Target
VLauncher_1.1.19_Windows.exe
-
Size
565KB
-
MD5
ad423e84984e00e778a2b8e452adf7d5
-
SHA1
52402c72769de3251262c194270e3ff48e9d1f1b
-
SHA256
461b8dc55a0923ec0ada54e19322d4b68ba21b067d2f067cd5dcd85a71f52f9c
-
SHA512
5d7f2a6a40bfa6e01bd145402351be0e7e78df50c2974d30f758402468a0d7186f5263e8673ecbacb9b58ab5c0ee85959e5bfafc31f0bc86740b4489ccbdc0dc
-
SSDEEP
12288:KgNsdo1aIdcLT/nWJj9rNqoFok01ralmHmMwanax0zVWnjxvj:fNsykT/Wlo7T/wrwVWjZj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VLauncher_1.1.19_Windows.exe
Files
-
VLauncher_1.1.19_Windows.exe.exe windows:4 windows x86 arch:x86
e34f607c9c0097114edd29df62b90b35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
wcscmp
memmove
wcslen
wcscpy
wcscat
memcmp
sscanf
sprintf
strcpy
strlen
strcat
_stricmp
_wstat
_wcsdup
free
strcmp
memcpy
strncpy
wcsncmp
floor
fabs
malloc
ceil
fseek
ftell
fread
fclose
pow
??3@YAXPAX@Z
wcsstr
_wcsnicmp
wcsncpy
_wcsicmp
setlocale
swscanf
tolower
calloc
_errno
localtime
strrchr
memchr
strncmp
mktime
abort
_close
_wopen
realloc
_setmode
_lseeki64
exit
_open_osfhandle
strchr
_strdup
_snprintf
wctomb
_get_osfhandle
_open
toupper
wcschr
mbstowcs
__p__iob
fwrite
strtol
strtoul
strerror
qsort
fopen
fputs
strstr
strpbrk
_access
_read
_write
atoi
fflush
fputc
getenv
fgets
strspn
strcspn
gmtime
isupper
_stati64
time
_ftime
_vsnwprintf
kernel32
GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
CreateProcessW
HeapFree
CreateFileW
GetFileSize
ReadFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
SetEndOfFile
WriteFile
DeleteFileW
HeapReAlloc
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
SetLastError
MulDiv
GetVersionExW
HeapSize
TlsAlloc
GetTempPathW
SetCurrentDirectoryW
SetFileAttributesW
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
CopyFileW
CreateDirectoryW
GetLastError
FindNextFileW
MoveFileW
TlsFree
TlsGetValue
TlsSetValue
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
IsValidCodePage
GetACP
GetOEMCP
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetFileAttributesA
CreateFileA
GetExitCodeProcess
GetFullPathNameW
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
QueryPerformanceFrequency
SleepEx
QueryPerformanceCounter
GetTickCount
ExpandEnvironmentStringsA
FormatMessageA
GetFileSizeEx
UnregisterWait
GetCurrentThread
RegisterWaitForSingleObject
ole32
CoInitialize
RevokeDragDrop
shell32
ShellExecuteExW
ws2_32
closesocket
WSACleanup
WSAStartup
socket
recv
WSAGetLastError
send
ntohs
WSASetLastError
getsockopt
setsockopt
getpeername
getsockname
htons
bind
connect
WSAIoctl
select
__WSAFDIsSet
getaddrinfo
freeaddrinfo
htonl
listen
accept
ioctlsocket
gethostname
ntohl
crypt32
CertFreeCertificateContext
CertOpenStore
CryptStringToBinaryA
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CertCreateCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateChain
CryptQueryObject
CertAddCertificateContextToStore
CertGetNameStringA
winmm
timeBeginPeriod
gdiplus
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY
user32
MessageBoxW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongW
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
DestroyWindow
SystemParametersInfoW
GetSysColor
GetSysColorBrush
CallWindowProcW
SendMessageW
GetDC
GetSystemMetrics
ReleaseDC
CreateWindowExW
SetWindowLongW
GetWindow
GetParent
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
SetWindowTextW
SetRect
DrawTextW
ShowWindow
GetPropW
RedrawWindow
RemovePropW
DefWindowProcW
SetPropW
FillRect
MapWindowPoints
MoveWindow
SetActiveWindow
DestroyIcon
LoadIconW
LoadCursorW
RegisterClassW
AdjustWindowRectEx
CreateAcceleratorTableW
UnregisterClassW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DefFrameProcW
SetFocus
GetFocus
DestroyAcceleratorTable
EnumChildWindows
PostMessageW
GetKeyState
GetClassNameW
IsChild
CharLowerW
RegisterWindowMessageW
gdi32
DeleteObject
GetStockObject
CreateFontIndirectW
SetBkColor
SetTextColor
SelectObject
GetTextExtentPoint32W
CreateCompatibleBitmap
GetObjectType
CreateDCW
CreateCompatibleDC
DeleteDC
GetObjectW
SetStretchBltMode
StretchBlt
CreateSolidBrush
GetDeviceCaps
CreateBitmap
SetPixel
CreateDIBSection
GetDIBits
BitBlt
CreateFontW
advapi32
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
comctl32
InitCommonControlsEx
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_Create
Sections
.code Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 423KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ