applauncher.rar_pw_infected.zip
- SHA256 2a4caa7639eed64ff133e12825533910b09a780007ee2be17cc35a0339e60396
Password
infected
Behavioral task
behavioral1
Sample
App_launhcer.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target applauncher.rar_pw_infected.zip
- Size 39.8MB
- Sample260706-saffeacv4r
- SHA256 2a4caa7639eed64ff133e12825533910b09a780007ee2be17cc35a0339e60396
- MD5 a5389f41541910c7448180c5cffe5df0
- SHA1 39d980c32b87183d1b4c574f2f5d39a54b702347
- SHA512 15a4e531b4c9b47964a6fbf3092d7d7c128a5c04bc88397eb674e6cddd1ad09a0406ca3657e0ea9dda7d991ac650809e8495643429c385745b83d170ce5e0dcc
- SSDEEP 786432:qzlwO9KhfBPqx2/WQEsvrT47y/j+0u9mekUkKIvJy4EaJwbBHzNMyK:qzqPhSx+R/q06Nk7vJtJwtHz5K
- TLSH T1269733FF23931ABAD11007D8F55D0890F29990CA46F59BD0421327A69DEA2CBF3974F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/App_launhcer.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack002/App_launhcer.exe innosetup
File Explorer
-
applauncher.rar_pw_infected.zip.zip 39.8MB
-
applauncher.rar.rar 39.8MB
-
App_launhcer.exe.exe 14.3MB
-
Installation_Instructions.txt1KB
-
License.txt1KB
-
Readme.txt1KB
-
Terms_Of_Use.txt1KB
-
lang/Language.txt1KB
-
lang/chinese.dat5.7MB
-
lang/english.dat10.6MB
-
lang/german.dat6.6MB
-
lang/russian.dat5.1MB
-
lang/spanish.dat5.0MB
applauncher.rar
- SHA256 49b6aa2e283633bfce1b6c81f5cb1424e4f79c036a477c0ccc4194a346785598
- MD5 8d2d4c4afd003c40fbcdec4c815d2e83
- SHA1 554bd04facb222fc2c1466921b4fef0a58d04764
- SHA512 b24ef42a436895067917770def524a485f32d0880c77ac4e8e9914d40539168314283f6069a1a675944fba973a3430fccf5a646d83d3b143b7326d9a877436a0
- SSDEEP 786432:hBD0P9J4dAmWHIn0Ry8ZFS8f0jSUBDRmdzZibm6u3H9C:h10P9JtmWHi0k8PPHUBDcdyu3H9C
- TLSH T1B297338D21836FDD27AA73A2413CDC6C661764DBC0B2E2531DEF232B489DBB5912B471
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2026
App_launhcer.exe
- IMPHASH 88016fcdef7f227c62171d0afad9aae4
- SHA256 29312011416b32409cd871f91499289d0568a3c2993827e76c659a2a9d8562e3
- MD5 35c7c20efd9c5e4a7dda554c7d3373e2
- SHA1 e4d337170113f2b013e824f901dd4a6d1532ee62
- SHA512 7a33c5e9589046822c05fd5a929a3fc625829c5f5cc5dec7e12dd169f2544c80615987de189ad465ba930e7bf0f8dd085cd41c40c1f4356bae2e418ad1f2f9af
- SSDEEP 196608:7vx/R8RCTcZsQOLmAYcAj+G0a3LrSxK/1dzr:75Uv6lYcq0a4K/
- TLSH T1D8E623736349A93EF06A073599B2D9A0483FAEA0AD024D1B96F07CBDDF311613D37646
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
2026
Minor OS version
1
Major OS version
6
Entry point
724576
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetACP
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
VirtualProtect
QueryPerformanceFrequency
VirtualFree
GetFullPathNameW
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
CompareStringOrdinal
RtlUnwind
SetFilePointerEx
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
GetFileSizeEx
LoadLibraryA
ResetEvent
GetVolumeInformationW
GetVersion
GetDriveTypeW
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetCommandLineW
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32
InitCommonControls
user32
CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32
SafeArrayPutElement
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
EqualSid
RegQueryValueExW
GetTokenInformation
ConvertSidToStringSidW
RegCloseKey
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
113B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
24B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Installation_Instructions.txt
- SHA256 88da780a4011ce522b25c90e2ae7130cb644f9749192a8b7a04804d1df6f53a3
- MD5 da3639a6c77c7d9b0f93f41628285851
- SHA1 76dbafc4238d68714e990df83a5b3c7c10b855b4
- SHA512 e9ea06528e0723ccd27d8b9dab29bf831a4648b5e4c85af91b9b01dd67fa7e173a7b92dd56e285fc4828b9c63bcb3537c3fafe77325c72fd2e1678bfad617177
- TLSH T11331F44D7698A32927924F4765322D82A1529440E3454844BFBEA4C4DF3EF50CF72B46
- MD5 SHA1 SHA512 TLSH
License.txt
- SHA256 a311ffac759adb0bb8d2e326a193f76c5b4f218d139ea1cdd6585a433dde7a41
- MD5 ebf32994dd44375501f99d535a39db51
- SHA1 0e3220189036cb0522277ace93f55e1561ad4772
- SHA512 52a7a3f86f1d63d5ec4772b5b4c9cb0a1ec0bcd8d622d32fb07f027945e72d3e78e52959db687af132f1fcdbeba26943694ab60abb82acfa23b534a4160521f7
- TLSH T114312B687541635B0B410F9A2DB26EA5F20D9D20E22318F4B92C11C81F76837CFBA226
- MD5 SHA1 SHA512 TLSH
Readme.txt
- SHA256 e69e9008c03a89724f1a7eeab08c5520412c8641bd1a8603fa26ead7c9375f7d
- MD5 687560ae8bbcfb3d57fb71236c475283
- SHA1 e3d2ee513478f9034b5a35f51d29fcaa332dab85
- SHA512 af222fb17b4b1c5ef78c6f9e92d22a50649f255b16fe2b8a5701357dbefbad6b81f6e8d7fe977618c095ec0175509502646868a44c57e49873b2de6bda9fe6c9
- TLSH T13931FB9D39007628731A8EC560332E0BAA16F048D2682896372E51C9EFFBF11DF63330
- MD5 SHA1 SHA512 TLSH
Terms_Of_Use.txt
- SHA256 3b0f33b13de1fb83cf042f8d4984a5b7bbbf5b2741395c2cccb4c60b0734a70a
- MD5 e20ff20685fce6fd46a0e95a99493a6d
- SHA1 ef7d323e9c61216de5a7f24ba52a4a83397bd86a
- SHA512 05e64eafd8a586601b54b34ab454001a9c78166b6643f53080a0689cd32852c04be887c296f525563f341299e48b9abd1391c75ba956883ac42c28469aa91cc0
- TLSH T10831F1B9730157B626830E721EB35FA1B36768F0F61041A1B09E80C42F72A34CFBA59C
- MD5 SHA1 SHA512 TLSH
lang/Language.txt
- SHA256 35707f8b2d8bbaead4f9be6d02072e5b66c035e2585a0ee2a1e26fad093ac724
- MD5 bb539322eb5acad2cea18c1bc29995ff
- SHA1 cab7cb24d0e9e853326d3bce67496b63d7290cdb
- SHA512 228f3d15fc643b182ab5256ebc36d2acbc746844cc8fa8e99573f578de6dcf91f501245f7c035b82014d8e00a40c35b49dfd634f8082ae8d73c2b4a35c48208e
- TLSH T137311E24740027A822160D82303A1E659F8581ACD2319D3A372D45D9DFF3A18CEBA3A2
- MD5 SHA1 SHA512 TLSH
lang/chinese.dat
- SHA256 8bf69ea73257fc23f40bcff09905042d6994458401b8e7f79a604eca6f68900c
- MD5 5e1a06a8ca5d8395aafd007391ceb9e8
- SHA1 9369ec08878d26cbc2c396a331a213004b64f2e9
- SHA512 e5390fc722a3cd4b0a9b1396789c5df9c00fbb323e01876bbbabd32595142f2c176a9f3a1284a60f88fc68bded3f7e7e0508207dc4880a4b5beecdad6418c514
- SSDEEP 98304:r3pgu++ughW44oWMme/BKCUFzJhQ0Dgk0uTFgmEHXvTIlZCldFQmmID0oxkYWTp:b5ughSe8VFzJh7DN0oFo/TLl4K4oxkY6
- TLSH T1635633E94B91CC4FB7A9B4439D8A5FC82C14C797189342DF2AB1BF19C29A2BD301D1B4
- MD5 SHA1 SHA512 SSDEEP TLSH
lang/english.dat
- SHA256 d6fb851b5baff8917cc12463d6806ababc9fd3ee2b87fb32e2230a8af1bd87e3
- MD5 5684a4b6ed57ec9334acbfe38d50508c
- SHA1 04234a921fb6efafba179469b13ab70b83751fdc
- SHA512 b204b14a191381d2759e04c9a8d80edd6949a29120a77e3d50e1e10893a29b966b041a547f501b8d574a046e1e1bb732aaa3bc87ece896649d9091562d958ccb
- SSDEEP 196608:Yr0L0H25DUgc9YzAdbHjbgwK/SLE4J+3/D87GzwAhE9wNNXL04FI/N+OZSjnMOjL:bLrxKkgbHfgTSLlI/D87Gkx9wvzF7x4y
- TLSH T173B633BF53D5DB3C5499B8872CC9D7F228D16918C93A05996C08ECCD4E98E378B027AD
- MD5 SHA1 SHA512 SSDEEP TLSH
lang/german.dat
- SHA256 05a6e533f17360de9609e03af708bf736d0270ae7330cfbf29710ded3e55f5fa
- MD5 69135fbf3fec3a1673e809df30fc9137
- SHA1 7f0494ef2395c3f9adc7c084803a6034d21f3f9e
- SHA512 d4f50328a0785ab0dfb4edb1bf6d3f75ba2c9bfd097c8b04ec936cb1a22f477c8f353c43b39b0134f63180228e6e4d6fb3132a9c2cc1fab13010695f5d4f5942
- SSDEEP 98304:q+/9EAaw999nqxhWJKVU0Vf+N6nDa945+FUOHIgNyg4Twqj2cuVAej4ojUgO/ZOu:q+1j3q3WQD+NGj5+FU8gXJ2cuKloj+x
- TLSH T150663309FB6B4C3510EA15A14F5B1E51D65F300C9B1688AEF23BE7B5177AB8C3DA80D8
- MD5 SHA1 SHA512 SSDEEP TLSH
lang/russian.dat
- SHA256 84acecdbc13e38d9df6ef05eeeca40aa4c1e81080764853e3cf0729ba3b89211
- MD5 c1d96a86a8e1501bdc4e40dd6ac7f180
- SHA1 1db0f6d8272a249a3a80bab73bf08b1923d703ac
- SHA512 13fc92935b42ca7df1c7e1152dad020530aca91f311b5fa69e33f186c0540f51b1619e7d9ce69991d617181f351320b8863d889303b32a65facced01477fc2a4
- SSDEEP 98304:61NzA/JNEUzKOTvd3qUzfe1Pj/uIu6XxGpXHaW+1RF0pDw/WGIQpp0qv9iW12MQ8:qNzA/4UzKqBqU+/uIu6XxGBHk1RCrTSN
- TLSH T1B34633069CFE3869E9A7D723014CDAA038067F8226515FD57AFF2BD642CA33805F9764
- MD5 SHA1 SHA512 SSDEEP TLSH
lang/spanish.dat
- SHA256 b023ce374a6712ef684124ba6774470e26a31fbab4f04520bb098eef281a8786
- MD5 8766cdf3eaf781489c54ef641db0f669
- SHA1 293da0359ea404f65ee38f3f32a92040093310b7
- SHA512 a36a9f0e129f5d1847bc8f8233d6db0a33392a777708b4961cf871574607b7e5969046e80c08303221d06f8e7cdf32eacddffca009bd51cf1d6f5c785a1ab72c
- SSDEEP 98304:lRvkU8o4iakxHrdqQj9ukpqv7Gz7XXNixCCzWH0nVeDyFff5:lRn8f01cY9uuO7G/QFCH0nz55
- TLSH T1C83633DC56308BD6269B071A3D56978041EF2E623C0487DCCD1C1462E78A9BBCF7D6BA
- MD5 SHA1 SHA512 SSDEEP TLSH