virus-launcher[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

virus-launcher.exe
Size

2.5MB
MD5

f24caaa9c1d2f3d9daa37f691b01958e
SHA1

4f95f1d6341d7b47eae2ba3b3f1e56e64cf8184f
SHA256

48361e7e0896ad96ea92673085c3300f101c246e9075b420575b56eaba01f5f2
SHA512

f3adcf2f1c338d44e248f832fa90a889db585fd7b2191f75b1a708643f6c54a294a06e35abaa004d581bc78d33272d81298814562a3d550ea1d933f18ff4c919
SSDEEP

24576:SMomVUkfxL8zBbKB9mKnSjmil5H7n5BSVE5WWQmMFQVBex:SMoJkfV8z4B9mGSj5bn5sVE2cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virus-launcher.exe

Files

virus-launcher.exe
.exe windows:6 windows x64 arch:x64

570234cf0e723d4e199ab8e94655f915

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

gdi32

GetDeviceCaps

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree
CoSetProxyBlanket
CoCreateInstance
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateFreeThreadedMarshaler
CoInitialize
CoWaitForMultipleHandles
CoInitializeSecurity

oleaut32

SysAllocString
SysStringLen
SysFreeString
SetErrorInfo
GetErrorInfo
VariantClear

ntdll

RtlGetVersion
RtlUnwindEx
VerSetConditionMask
RtlUnwind

dwmapi

DwmSetWindowAttribute

ws2_32

shutdown
WSARecv
WSASend
setsockopt
ntohs
ntohl
WSAGetLastError
WSASetLastError
WSAAddressToStringW
listen
WSAStringToAddressW
WSAStartup
htons
htonl
getsockopt
getsockname
getpeername
ioctlsocket
closesocket
bind
WSACleanup
WSASocketW

mswsock

AcceptEx
GetAcceptExSockaddrs

kernel32

IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
EnumSystemLocalesW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
WriteConsoleW
GetFileType
GetStdHandle
InterlockedPushEntrySList
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetUserDefaultLCID
GetDriveTypeW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
GetCurrentProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
VerifyVersionInfoW
CreateActCtxA
ActivateActCtx
DeactivateActCtx
MultiByteToWideChar
WideCharToMultiByte
GetLastError
PostQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsFree
LocalFree
FormatMessageA
AttachConsole
CloseHandle
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
CancelIoEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
WaitForSingleObject
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
CreateWaitableTimerW
QueueUserAPC
TerminateThread
TlsGetValue
TlsSetValue
GetModuleHandleA
GetProcAddress
GetCurrentProcessId
TerminateProcess
OpenProcess
CreateFileW
GetFileSizeEx
DecodePointer
RaiseException
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
GetFileInformationByHandleEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetModuleHandleW
EnumResourceNamesW
SetFileAttributesA
SetEnvironmentVariableW
ExitProcess
GetModuleFileNameA
LoadLibraryExW
FreeConsole
GetEnvironmentVariableA
GetFileAttributesA
GetSystemTimeAsFileTime
GetNativeSystemInfo
QueryPerformanceFrequency
GetLogicalProcessorInformation
GlobalMemoryStatusEx
ReadDirectoryChangesW
ReadFile
WriteFile
SetHandleInformation
CreatePipe
GetExitCodeProcess
CreateProcessW
GetConsoleWindow
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Sleep
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeA
InitializeCriticalSection
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
LoadLibraryW
RtlPcToFileHeader
QueryPerformanceCounter
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetExitCodeThread
SetCurrentDirectoryW
CreateDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetEndOfFile
SetFileInformationByHandle
SetFilePointerEx
GetTempPathW
AreFileApisANSI
DeviceIoControl
CopyFileW
MoveFileExW
CreateHardLinkW
CreateSymbolicLinkW
GetStringTypeW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetLocaleInfoEx
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
FormatMessageW

user32

FindWindowW
LoadIconW
DestroyIcon
GetMessageW
PostThreadMessageW
DefWindowProcW
PostQuitMessage
RegisterClassExW
CreateWindowExW
DestroyWindow
ShowWindow
FlashWindowEx
MoveWindow
SetWindowPos
IsWindowVisible
IsIconic
IsZoomed
GetSystemMetrics
TrackPopupMenu
GetMenuItemInfoW
SetForegroundWindow
SetWindowTextW
GetWindowTextW
CreatePopupMenu
GetClientRect
GetWindowRect
UpdateWindow
SetWindowLongW
GetWindowLongPtrW
SetWindowLongPtrW
GetDesktopWindow
LoadImageW
MonitorFromWindow
GetMonitorInfoW
GetRawInputDeviceList
GetDC
EnumDisplaySettingsW
EnumDisplayDevicesW
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
RegisterClipboardFormatA
RegisterClipboardFormatW
EmptyClipboard
IsClipboardFormatAvailable
SendMessageW
GetCursorPos
GetWindowThreadProcessId
EnumWindows
MessageBoxW
GetForegroundWindow
InsertMenuItemW
InsertMenuW
GetWindowLongW
DestroyMenu
GetActiveWindow
PeekMessageW
DispatchMessageW
TranslateMessage
GetWindowTextLengthW

advapi32

RegOpenKeyExA
RegQueryValueExA
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegGetValueW

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetKnownFolderPath
Shell_NotifyIconW

shlwapi

ord12
PathFindFileNameA
PathRemoveFileSpecW

gdiplus

GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdipCreateHICONFromBitmap
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipFree
GdiplusStartup
GdipCreateBitmapFromStream

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

570234cf0e723d4e199ab8e94655f915

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

version

ole32

oleaut32

ntdll

dwmapi

ws2_32

mswsock

kernel32

user32

advapi32

shell32

shlwapi

gdiplus

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 456KB - Virtual size: 456KB

.data Size: 38KB - Virtual size: 52KB

.pdata Size: 161KB - Virtual size: 160KB

_RDATA Size: 512B - Virtual size: 244B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 456KB - Virtual size: 456KB

.data
Size: 38KB - Virtual size: 52KB

.pdata
Size: 161KB - Virtual size: 160KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 8KB - Virtual size: 7KB