launcher[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
launcher.exe
Size 4.4MB
Sample260705-dj7tpagy5w
SHA256 956e1ee2d97b293b8df49392710dabcc4b854c8c38b55ba4ba5c455ceeb1305d
MD5 52f26af3d2f1cce8d691999a18125cec
SHA1 1eda7ce195a4075d9d726e4cfe3cb21324e69a07
SHA512 c0425191d2154d651e03e35e4af65187db3028dac4d05514ca7bc4989b5aa8b4b79b6621342086b101511a1cb9dd2a835e7f23bb3d763e61a2b641fc2c60c327
SSDEEP 98304:N6t2RkuQybaznSJr3+yuEkO/Csz2Kr46YSlJnHyf0z+kQEIE:N0u7qYj9fkO/CEnofZJEIE
TLSH
T129262347659B19FDE652C7F5C46134EFF06D3B838A229B99378827286D172BCAC76300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
launcher.exe

File Explorer

launcher.exe

.exe 4.4MB

launcher.exe

IMPHASH 35e2c20bcb8845dab02cf03d0bacd11d
SHA256 956e1ee2d97b293b8df49392710dabcc4b854c8c38b55ba4ba5c455ceeb1305d
MD5 52f26af3d2f1cce8d691999a18125cec
SHA1 1eda7ce195a4075d9d726e4cfe3cb21324e69a07
SHA512 c0425191d2154d651e03e35e4af65187db3028dac4d05514ca7bc4989b5aa8b4b79b6621342086b101511a1cb9dd2a835e7f23bb3d763e61a2b641fc2c60c327
SSDEEP 98304:N6t2RkuQybaznSJr3+yuEkO/Csz2Kr46YSlJnHyf0z+kQEIE:N0u7qYj9fkO/CEnofZJEIE
TLSH
T129262347659B19FDE652C7F5C46134EFF06D3B838A229B99378827286D172BCAC76300
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8489262

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dbghelp

StackWalk64

advapi32

AdjustTokenPrivileges

kernel32

GetVersionExW GetSystemTimeAsFileTime HeapAlloc HeapFree ExitProcess GetModuleHandleA LoadLibraryA GetProcAddress

user32

ScreenToClient

shell32

ShellExecuteW

ole32

CoCreateGuid

msvcp140

?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z

d3d11

D3D11CreateDeviceAndSwapChain

bcrypt

BCryptCloseAlgorithmProvider

imm32

ImmSetCompositionWindow

dwmapi

DwmExtendFrameIntoClientArea

d3dcompiler_47

D3DCompile

vcruntime140

__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

feof

api-ms-win-crt-filesystem-l1-1-0

_stat64

api-ms-win-crt-heap-l1-1-0

_aligned_free

api-ms-win-crt-string-l1-1-0

isupper

api-ms-win-crt-math-l1-1-0

_dclass

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-runtime-l1-1-0

_initterm

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

ws2_32

WSAWaitForMultipleEvents

crypt32

CertAddCertificateContextToStore

Name

.text

Size

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.H,~

Size

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.mkL

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fha

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

160KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

launcher.exe

dbghelp

advapi32

kernel32

user32

shell32

ole32

msvcp140

d3d11

bcrypt

imm32

dwmapi

d3dcompiler_47

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

ws2_32

crypt32

generic