Behavioral task
behavioral1
Sample
!果核剥壳 - 全网更新最快.url
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
!果核剥壳 - 全网更新最快.url
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
CLaunch_v4.0.4_32Bit_Setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
CLaunch_v4.0.4_32Bit_Setup.exe
Resource
win10v2004-20241007-en
General
-
Target
651365c5bc0e6c61e9941e7bdc0bb505dec10d4c00efffbf217586ab33ced21f
-
Size
15.7MB
-
MD5
f717fc152d467a4dae7c09d96bbfab19
-
SHA1
878ad3e1d36e21116f4359a061ba921adcf9447d
-
SHA256
651365c5bc0e6c61e9941e7bdc0bb505dec10d4c00efffbf217586ab33ced21f
-
SHA512
1de3d6a56f1c2a43f6957855689aa0b5aad0a0fff0956649f54ed0fe28a88027386730a50137410635b57840587dc7fd578310f85769dd9d7d0dc5d3f64e3beb
-
SSDEEP
393216:KgP36Da09o2ZOmvSVbaMx1t0bZmr6Da09o2ZOmvSVbaMx1t:Kgf6D51ZjSkAabZmr6D51ZjSkAt
Malware Config
Signatures
Files
-
651365c5bc0e6c61e9941e7bdc0bb505dec10d4c00efffbf217586ab33ced21f.zip
-
CLaunch/CLaunch_v4.0.4_32Bit_Setup.zip.zip
-
!关注微信 - 更多福利.png.png
-
http://weixin.qq.com/r/wii4oJjEU8UsrdzD933Q
-
-
!果核剥壳 - 全网更新最快.url.url
-
CLaunch_v4.0.4_32Bit_Setup.exe.exe windows:5 windows x86 arch:x86
a08d60fa3a4388ecc9b8794522ce63bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathW
GetFileAttributesW
lstrlenW
lstrcpyW
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetModuleHandleA
OutputDebugStringA
FreeLibrary
GetVersionExW
lstrcatW
GlobalFree
GlobalUnlock
GlobalHandle
GlobalReAlloc
GlobalAlloc
GlobalLock
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
IsDBCSLeadByte
CloseHandle
SetFileTime
CreateFileW
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetSystemDirectoryW
GetWindowsDirectoryW
GetTempPathW
lstrcmpW
Sleep
GetCurrentThreadId
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
lstrcpyA
DeleteFileW
SetFileAttributesW
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileSize
GetFileTime
GetCurrentProcess
GetModuleHandleW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetShortPathNameW
lstrcmpiW
GetExitCodeThread
GetModuleFileNameW
lstrlenA
LocalAlloc
InterlockedExchange
GetLastError
RaiseException
HeapFree
ReadFile
HeapAlloc
ExitThread
CreateThread
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
ExitProcess
RtlUnwind
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
SetStdHandle
FlushFileBuffers
WriteConsoleW
LoadLibraryW
HeapReAlloc
HeapSize
SetEndOfFile
GetProcessHeap
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
皮肤包/Air.zip.zip
-
Air/Window.png.png
-
Air/area.png.png
-
Air/button.png.png
-
Air/caption.png.png
-
Air/license.txt
-
Air/lockmarker1.png.png
-
Air/lockmarker2.png.png
-
Air/menuArrowLR.png.png
-
Air/menuArrowUD.png.png
-
Air/menuItem.png.png
-
Air/menuScroll.png.png
-
Air/menuWindow.png.png
-
Air/skin.xml
-
Air/sysbutton.png.png
-
Air/tab.png.png
-
Air/tabarea.png.png
-
皮肤包/Air1.zip.zip
-
Window.png.png
-
area.png.png
-
button.png.png
-
caption.png.png
-
license.txt
-
lockmarker1.png.png
-
lockmarker2.png.png
-
menuArrowLR.png.png
-
menuArrowUD.png.png
-
menuItem.png.png
-
menuScroll.png.png
-
menuWindow.png.png
-
skin.xml
-
sysbutton.png.png
-
tab.png.png
-
tabarea.png.png
-
皮肤包/Box1.zip.zip
-
Window.png.png
-
area.png.png
-
button.png.png
-
caption.png.png
-
license.txt
-
lockmarker1.png.png
-
lockmarker2.png.png
-
menuArrowLR.png.png
-
menuArrowUD.png.png
-
menuItem.png.png
-
menuScroll.png.png
-
menuWindow.png.png
-
skin.xml
-
sysbutton.png.png
-
tab.png.png
-
tabarea.png.png
-
皮肤包/Box2.zip.zip
-
Window.png.png
-
area.png.png
-
button.png.png
-
caption.png.png
-
license.txt
-
lockmarker1.png.png
-
lockmarker2.png.png
-
menuArrowLR.png.png
-
menuArrowUD.png.png
-
menuItem.png.png
-
menuScroll.png.png
-
menuWindow.png.png
-
skin.xml
-
sysbutton.png.png
-
tab.png.png
-
tabarea.png.png
-
皮肤包/CLaunchX.zip.zip
-
CLaunchX/1background_0.png.png
-
CLaunchX/button.png.png
-
CLaunchX/lockmarker.png.png
-
CLaunchX/menuArrowLR.png.png
-
CLaunchX/menuArrowUD.png.png
-
CLaunchX/menuItem.png.png
-
CLaunchX/menuScroll.png.png
-
CLaunchX/menuWindow.png.png
-
CLaunchX/skin.xml
-
CLaunchX/sysbutton.png.png
-
CLaunchX/tab.png.png
-
CLaunchX/window.png.png
-
皮肤包/Glass.zip.zip
-
arrowlr.png.png
-
arrowud.png.png
-
background.png.png
-
button.png.png
-
lockmarker.png.png
-
menubg.png.png
-
menuframe.png.png
-
menuitem.png.png
-
scrollbutton.png.png
-
skin.xml
-
sysbutton.png.png
-
tab.png.png
-
window.png.png
-
皮肤包/Matcha Chocolate [Bottom].zip.zip
-
皮肤包/Matcha Chocolate [Left].zip.zip
-
皮肤包/Matcha Chocolate [Right].zip.zip
-
皮肤包/Matcha Chocolate [Top].zip.zip
-
皮肤包/Modern8_[bottom].zip.zip
-
皮肤包/Modern8_[left].zip.zip
-
皮肤包/Modern8_[right].zip.zip
-
皮肤包/PicFrame_[black].zip.zip
-
皮肤包/PicFrame_[clear].zip.zip
-
皮肤包/PicFrame_[none].zip.zip
-
皮肤包/PicFrame_[white].zip.zip
-
皮肤包/Solid Black.zip.zip
-
皮肤包/Tranquil time.zip.zip
-
皮肤包/Vista-Style.zip.zip
-
皮肤包/divTiles_kaku.zip.zip
-
皮肤包/divTiles_maru.zip.zip
-
皮肤包/grazer [bronze].zip.zip
-
皮肤包/grazer [green].zip.zip
-
皮肤包/grazer [navy].zip.zip
-
皮肤包/indesk.zip.zip
-
皮肤包/sasara [black].zip.zip
-
皮肤包/sasara [matte blue].zip.zip
-
皮肤包/sasara [silver].zip.zip
-
皮肤包/sasara [white].zip.zip
-
皮肤包/sasara [wine red].zip.zip
-
皮肤包/uno.zip.zip
-
CLaunch/CLaunch_v4.0.4_64Bit_Setup.zip.zip