SkarnfjordLauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SkarnfjordLauncher.exe
Size 6.8MB
Sample260706-pf2daaay6k
SHA256 f01ac8ea890b0415292ce49eb48c1b65bded3a209e4f40db8115e115a3cef2b2
MD5 1fb0747af30c2be2ef87f63a1f11ef1f
SHA1 971ff3b0df519385ed544c396fed557c6c20d8b4
SHA512 f4ac63864df119876bcee471818558737ed213fa122e74fdce379135734d5f92cc03692119001de1af72d2e2ec72692672cfd34080ef06e2feb04c50ec2280a5
SSDEEP 49152:pBWIueP7o5WRT7npLyHp9drEeOK8+dBrLg9P9x5r9HYMKCYSSo9q1v+cIU6i6T7o:D5LpSzbB3BCVDhT+8sbr
TLSH
T164666B12BB5A99ACD01AC4B4834686735A36B0CB0B35B9FF45C855383F6AAF05F3C359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SkarnfjordLauncher.exe

File Explorer

SkarnfjordLauncher.exe

.exe 6.8MB

SkarnfjordLauncher.exe

IMPHASH 8b28ac892c4b5bc44d7abc8b54db5309
SHA256 f01ac8ea890b0415292ce49eb48c1b65bded3a209e4f40db8115e115a3cef2b2
MD5 1fb0747af30c2be2ef87f63a1f11ef1f
SHA1 971ff3b0df519385ed544c396fed557c6c20d8b4
SHA512 f4ac63864df119876bcee471818558737ed213fa122e74fdce379135734d5f92cc03692119001de1af72d2e2ec72692672cfd34080ef06e2feb04c50ec2280a5
SSDEEP 49152:pBWIueP7o5WRT7npLyHp9drEeOK8+dBrLg9P9x5r9HYMKCYSSo9q1v+cIU6i6T7o:D5LpSzbB3BCVDhT+8sbr
TLSH
T164666B12BB5A99ACD01AC4B4834686735A36B0CB0B35B9FF45C855383F6AAF05F3C359
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3968128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

launcher.pdb

kernel32

RtlVirtualUnwind GetSystemTimeAsFileTime InitializeSListHead GetModuleHandleA Sleep CloseHandle SetUnhandledExceptionFilter FormatMessageW LoadLibraryExA GetModuleFileNameW FreeLibrary GetCurrentThreadId SetThreadErrorMode GetModuleHandleW GetFileAttributesW GetConsoleOutputCP GetConsoleMode WaitForSingleObject GlobalUnlock HeapAlloc HeapFree WriteConsoleW LoadLibraryExW DeleteFileW ReleaseMutex CreateMutexA WaitForSingleObjectEx SwitchToThread ExitProcess CreateWaitableTimerExW SetWaitableTimer FindClose FindFirstFileExW lstrlenW WideCharToMultiByte GetCurrentThread GlobalFree GetEnvironmentVariableW GetCurrentDirectoryW SetLastError GlobalAlloc LoadLibraryW GlobalSize GlobalLock SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetStdHandle GetExitCodeProcess LoadLibraryA CreateProcessW GetProcessHeap GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx GetFileInformationByHandle GetSystemTimePreciseAsFileTime RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle GetCurrentProcess MultiByteToWideChar GetProcAddress GetLastError ReadFileEx GetCurrentProcessId SetHandleInformation CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime CreateFileW SetFileInformationByHandle MoveFileExW GetFullPathNameW SleepEx CompareStringOrdinal WriteFileEx FreeEnvironmentStringsW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

user32

GetKeyState DestroyIcon DestroyCursor GetCursorPos MonitorFromWindow GetMonitorInfoW MsgWaitForMultipleObjectsEx MapVirtualKeyW RegisterRawInputDevices EnumDisplayMonitors MonitorFromPoint SystemParametersInfoA ReleaseCapture SetCapture RegisterWindowMessageA ShowCursor DestroyWindow GetWindowLongW GetMenu AdjustWindowRectEx IsProcessDPIAware PeekMessageW SetWindowDisplayAffinity GetWindowRect IsIconic SendInput TranslateMessage DispatchMessageW SetForegroundWindow GetWindowTextLengthW ReleaseDC GetWindowTextW ShowWindow SetWindowTextW GetClientRect RegisterTouchWindow GetSystemMenu CreateIcon GetActiveWindow GetKeyboardLayout GetSystemMetrics EnableMenuItem MonitorFromRect SendMessageW CreateIconFromResourceEx GetAsyncKeyState GetWindowLongPtrW RedrawWindow GetKeyboardState GetDC MapVirtualKeyExW TrackMouseEvent ValidateRect CloseTouchInputHandle ScreenToClient GetTouchInputInfo GetRawInputData GetWindowPlacement GetClassNameW GetClipCursor PostMessageW RemovePropW CallWindowProcW GetPropW SetWindowLongPtrW SetPropW ClipCursor CloseClipboard RegisterClipboardFormatW ToUnicodeEx GetClipboardData SetClipboardData OpenClipboard IsClipboardFormatAvailable EmptyClipboard SetWindowLongW SetWindowPlacement ChangeDisplaySettingsExW SetCursor LoadCursorW FlashWindowEx InvalidateRgn SetWindowPos GetForegroundWindow SetCursorPos ClientToScreen CreateWindowExW RegisterClassExW DefWindowProcW GetClassInfoExW

ole32

CoInitializeEx RevokeDragDrop CoUninitialize RegisterDragDrop CoCreateInstance CoTaskMemFree OleInitialize

shell32

DragQueryFileW DragFinish SHCreateItemFromParsingName

advapi32

SystemFunction036 CredFree CredDeleteW CredReadW CredWriteW RevertToSelf ImpersonateAnonymousToken

ws2_32

getpeername WSARecv WSASend connect recv select setsockopt send WSASocketW WSADuplicateSocketW ioctlsocket getsockname WSACleanup WSAStartup closesocket WSAGetLastError getaddrinfo freeaddrinfo getsockopt

bcrypt

BCryptGenRandom

opengl32

wglDeleteContext wglGetCurrentDC wglMakeCurrent wglGetCurrentContext wglShareLists wglGetProcAddress wglCreateContext

gdi32

GetDeviceCaps CreateRectRgn DeleteObject SwapBuffers ChoosePixelFormat DescribePixelFormat SetPixelFormat

shlwapi

AssocQueryStringW

uiautomationcore

UiaLookupId UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaRaiseAutomationEvent UiaReturnRawElementProvider UiaRaiseAutomationPropertyChangedEvent

oleaut32

SysAllocStringLen GetErrorInfo SysStringLen SafeArrayPutElement SafeArrayCreateVector VariantClear SysFreeString SetErrorInfo

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmGetContext ImmGetCompositionStringW ImmReleaseContext

uxtheme

SetWindowTheme

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

ntdll

NtReadFile RtlNtStatusToDosError NtWriteFile NtOpenFile NtCreateNamedPipeFile

vcruntime140

__current_exception_context __current_exception __C_specific_handler memcmp _CxxThrowException memmove memcpy __CxxFrameHandler3 memset

api-ms-win-crt-math-l1-1-0

floor round cos floorf expf sinf trunc _hypotf atan2f sin fmod ceilf cosf powf exp2f acosf cbrtf __setusermatherr roundf truncf

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initterm _set_app_type _seh_filter_exe _initterm_e exit _exit _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback strerror _initialize_onexit_table _register_onexit_function terminate _crt_atexit _get_initial_narrow_environment

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale