kentlauncher[.]exe

Resubmissions

14/07/2026, 08:42

260714-kl71ssb13y

14/07/2026, 08:35

260714-kg9ntshv8q9

Sharing

Copy URL Twitter E-mail

General

Target
kentlauncher.exe
Size 2.6MB
Sample260714-kl71ssb13y
SHA256 2e3e2d23c154630f8dc8c5bd69ed5e1410b9c8688a66a0197ed50082757cad76
MD5 6a11530760957ed0edf7d0992e316457
SHA1 53986bbdfec47767801f8c516b3551d72bbda340
SHA512 f659124cb5d172812798a976ce3623f24c2328ce73a071adcc50327e4449330cb739edb4b04022d663aec00c6b384cf499d218e1582783695b8b495b74da4c40
SSDEEP 49152:YgrX1tY/XGOKuXIYK/qck7ErxnG+iDXXFCMF4EHaYXJ0x:rxuXIzqy4VCc4EHrJ0x
TLSH
T17DC5C0D273EC4489E03775749A51190FE6727034072187DFBF950AAD8E7AAE0CB3AB52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kentlauncher.exe

File Explorer

kentlauncher.exe

.exe 2.6MB

kentlauncher.exe

IMPHASH 25096235a1f4788fde9597a1a1e09854
SHA256 2e3e2d23c154630f8dc8c5bd69ed5e1410b9c8688a66a0197ed50082757cad76
MD5 6a11530760957ed0edf7d0992e316457
SHA1 53986bbdfec47767801f8c516b3551d72bbda340
SHA512 f659124cb5d172812798a976ce3623f24c2328ce73a071adcc50327e4449330cb739edb4b04022d663aec00c6b384cf499d218e1582783695b8b495b74da4c40
SSDEEP 49152:YgrX1tY/XGOKuXIYK/qck7ErxnG+iDXXFCMF4EHaYXJ0x:rxuXIzqy4VCc4EHrJ0x
TLSH
T17DC5C0D273EC4489E03775749A51190FE6727034072187DFBF950AAD8E7AAE0CB3AB52
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

677968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

ole32

CoSetProxyBlanket CoCreateInstance CoUninitialize CoInitializeEx

crypt32

CryptUnprotectData CryptProtectData

winhttp

WinHttpQueryDataAvailable WinHttpConnect WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpOpen WinHttpReceiveResponse

kernel32

WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte GetProcAddress VerSetConditionMask FreeLibrary QueryPerformanceCounter FindFirstFileW FindNextFileW WriteFile RemoveDirectoryW GetTempPathW FindClose WaitForSingleObject CreateFileW GetFileAttributesW SetFileAttributesW Sleep GetLastError DeleteFileW CloseHandle CreateThread MoveFileExW GetCurrentProcessId CreateProcessW GetTickCount FlushFileBuffers GetExitCodeProcess GetModuleFileNameW GetCurrentProcess TerminateProcess GetCurrentThread GetThreadContext GetModuleHandleW GetSystemDirectoryW CreateToolhelp32Snapshot Process32NextW RaiseFailFastException Process32FirstW VirtualFree DeviceIoControl VirtualAlloc GetCurrentThreadId LocalFree GetWindowsDirectoryA GlobalLock OutputDebugStringW GetFileSizeEx GetConsoleOutputCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc ReadConsoleW GetConsoleMode SetFilePointerEx ExitProcess FreeLibraryAndExitThread ExitThread WriteConsoleW GetModuleHandleExW GetFileType GetStdHandle ReadFile LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx GetCPInfo GlobalFree GlobalAlloc MultiByteToWideChar OutputDebugStringA GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwind SetEnvironmentVariableW GetProcessHeap GetStringTypeW SetStdHandle HeapReAlloc HeapSize SetEndOfFile LCMapStringEx DecodePointer EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead TryAcquireSRWLockExclusive WaitForSingleObjectEx GetExitCodeThread InitOnceComplete InitOnceBeginInitialize EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection

user32

SetCursorPos ReleaseDC IsWindowUnicode SetProcessDPIAware GetClientRect SetCursor GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData ReleaseCapture SetCapture MonitorFromPoint SetWindowRgn CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW TranslateMessage PostQuitMessage UpdateWindow GetWindowRect DestroyWindow SetWindowPos wsprintfW DefWindowProcW GetKeyState GetMessageExtraInfo GetDC ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW

gdi32

GetDeviceCaps CreateRoundRectRgn

advapi32

RegDeleteValueW RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW RegCreateKeyExW RegOpenKeyW RegCreateKeyW RegDeleteKeyW RegDeleteTreeW RegSetKeyValueW

shell32

ShellExecuteW

oleaut32

VariantInit SysFreeString SysAllocString VariantClear

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

dwmapi

DwmSetWindowAttribute

ntdll

RtlAdjustPrivilege NtQuerySystemInformation NtUnloadDriver NtLoadDriver RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry RtlInitUnicodeString

Name

.text

Size

866KB

Virtual Size

866KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

674KB

Virtual Size

673KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

kentlauncher.exe

d3d11

d3dcompiler_47

ole32

crypt32

winhttp

kernel32

user32

gdi32

advapi32

shell32

oleaut32

imm32

dwmapi

ntdll

generic