VLauncher_1[.]1[.]19_Windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

VLauncher_1.1.19_Windows.exe
Size

565KB
MD5

ad423e84984e00e778a2b8e452adf7d5
SHA1

52402c72769de3251262c194270e3ff48e9d1f1b
SHA256

461b8dc55a0923ec0ada54e19322d4b68ba21b067d2f067cd5dcd85a71f52f9c
SHA512

5d7f2a6a40bfa6e01bd145402351be0e7e78df50c2974d30f758402468a0d7186f5263e8673ecbacb9b58ab5c0ee85959e5bfafc31f0bc86740b4489ccbdc0dc
SSDEEP

12288:KgNsdo1aIdcLT/nWJj9rNqoFok01ralmHmMwanax0zVWnjxvj:fNsykT/Wlo7T/wrwVWjZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VLauncher_1.1.19_Windows.exe

Files

VLauncher_1.1.19_Windows.exe
.exe windows:4 windows x86 arch:x86

e34f607c9c0097114edd29df62b90b35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcscmp
memmove
wcslen
wcscpy
wcscat
memcmp
sscanf
sprintf
strcpy
strlen
strcat
_stricmp
_wstat
_wcsdup
free
strcmp
memcpy
strncpy
wcsncmp
floor
fabs
malloc
ceil
fseek
ftell
fread
fclose
pow
??3@YAXPAX@Z
wcsstr
_wcsnicmp
wcsncpy
_wcsicmp
setlocale
swscanf
tolower
calloc
_errno
localtime
strrchr
memchr
strncmp
mktime
abort
_close
_wopen
realloc
_setmode
_lseeki64
exit
_open_osfhandle
strchr
_strdup
_snprintf
wctomb
_get_osfhandle
_open
toupper
wcschr
mbstowcs
__p__iob
fwrite
strtol
strtoul
strerror
qsort
fopen
fputs
strstr
strpbrk
_access
_read
_write
atoi
fflush
fputc
getenv
fgets
strspn
strcspn
gmtime
isupper
_stati64
time
_ftime
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
CreateProcessW
HeapFree
CreateFileW
GetFileSize
ReadFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
SetEndOfFile
WriteFile
DeleteFileW
HeapReAlloc
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
SetLastError
MulDiv
GetVersionExW
HeapSize
TlsAlloc
GetTempPathW
SetCurrentDirectoryW
SetFileAttributesW
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
CopyFileW
CreateDirectoryW
GetLastError
FindNextFileW
MoveFileW
TlsFree
TlsGetValue
TlsSetValue
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
IsValidCodePage
GetACP
GetOEMCP
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetFileAttributesA
CreateFileA
GetExitCodeProcess
GetFullPathNameW
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
QueryPerformanceFrequency
SleepEx
QueryPerformanceCounter
GetTickCount
ExpandEnvironmentStringsA
FormatMessageA
GetFileSizeEx
UnregisterWait
GetCurrentThread
RegisterWaitForSingleObject

ole32

CoInitialize
RevokeDragDrop

shell32

ShellExecuteExW

ws2_32

closesocket
WSACleanup
WSAStartup
socket
recv
WSAGetLastError
send
ntohs
WSASetLastError
getsockopt
setsockopt
getpeername
getsockname
htons
bind
connect
WSAIoctl
select
__WSAFDIsSet
getaddrinfo
freeaddrinfo
htonl
listen
accept
ioctlsocket
gethostname
ntohl

crypt32

CertFreeCertificateContext
CertOpenStore
CryptStringToBinaryA
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CertCreateCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateChain
CryptQueryObject
CertAddCertificateContextToStore
CertGetNameStringA

winmm

timeBeginPeriod

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY

user32

MessageBoxW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongW
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
DestroyWindow
SystemParametersInfoW
GetSysColor
GetSysColorBrush
CallWindowProcW
SendMessageW
GetDC
GetSystemMetrics
ReleaseDC
CreateWindowExW
SetWindowLongW
GetWindow
GetParent
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
SetWindowTextW
SetRect
DrawTextW
ShowWindow
GetPropW
RedrawWindow
RemovePropW
DefWindowProcW
SetPropW
FillRect
MapWindowPoints
MoveWindow
SetActiveWindow
DestroyIcon
LoadIconW
LoadCursorW
RegisterClassW
AdjustWindowRectEx
CreateAcceleratorTableW
UnregisterClassW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DefFrameProcW
SetFocus
GetFocus
DestroyAcceleratorTable
EnumChildWindows
PostMessageW
GetKeyState
GetClassNameW
IsChild
CharLowerW
RegisterWindowMessageW

gdi32

DeleteObject
GetStockObject
CreateFontIndirectW
SetBkColor
SetTextColor
SelectObject
GetTextExtentPoint32W
CreateCompatibleBitmap
GetObjectType
CreateDCW
CreateCompatibleDC
DeleteDC
GetObjectW
SetStretchBltMode
StretchBlt
CreateSolidBrush
GetDeviceCaps
CreateBitmap
SetPixel
CreateDIBSection
GetDIBits
BitBlt
CreateFontW

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash

comctl32

InitCommonControlsEx
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

Sections

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 423KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e34f607c9c0097114edd29df62b90b35

Headers

File Characteristics

Imports

msvcrt

kernel32

ole32

shell32

ws2_32

crypt32

winmm

gdiplus

user32

gdi32

advapi32

comctl32

Sections

.code Size: 23KB - Virtual size: 22KB

.text Size: 423KB - Virtual size: 422KB

.rdata Size: 87KB - Virtual size: 86KB

.data Size: 20KB - Virtual size: 24KB

.rsrc Size: 11KB - Virtual size: 11KB

.code
Size: 23KB - Virtual size: 22KB

.text
Size: 423KB - Virtual size: 422KB

.rdata
Size: 87KB - Virtual size: 86KB

.data
Size: 20KB - Virtual size: 24KB

.rsrc
Size: 11KB - Virtual size: 11KB