alterware-launcher[.]exe

Resubmissions

15/07/2026, 03:19

260715-dvbwdsay4p

15/07/2026, 03:16

260715-dssq5aax7m3

Sharing

Copy URL Twitter E-mail

General

Target
alterware-launcher.exe
Size 2.4MB
Sample260715-dvbwdsay4p
SHA256 5b2479d86485e00952f6d471243da6b6b5348a21cc5055b23aca5a39eb7dd462
MD5 54c6eca1efcf464f46841c453fff3500
SHA1 82f39d3f7ca56ade2af8a12e44f6a781c4bfa4ff
SHA512 283917068a10d14f30ded4a4fa9c28e1cee3580d781e14a2eddd4b3d17c0c7460a674e708b48b8de45ef175defe7bec14112066b266366801049f3796e810d17
SSDEEP 24576:917pUrxVRC8ewtSnmjfvlZIW5dec+AZWK2EbUOZfyDNTgNSfSkPGhnsFOaDvj9pG:kD3/7MVUNnwfFjD7ZtNbPC
TLSH
T13AC57C01F68685BAE84715B0202EE33FEF355D099718CBE3DBC46E72B47A3615E2924D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
alterware-launcher.exe

File Explorer

alterware-launcher.exe

.exe 2.4MB

alterware-launcher.exe

IMPHASH 3304febbfd92d29513df2ba166056f69
SHA256 5b2479d86485e00952f6d471243da6b6b5348a21cc5055b23aca5a39eb7dd462
MD5 54c6eca1efcf464f46841c453fff3500
SHA1 82f39d3f7ca56ade2af8a12e44f6a781c4bfa4ff
SHA512 283917068a10d14f30ded4a4fa9c28e1cee3580d781e14a2eddd4b3d17c0c7460a674e708b48b8de45ef175defe7bec14112066b266366801049f3796e810d17
SSDEEP 24576:917pUrxVRC8ewtSnmjfvlZIW5dec+AZWK2EbUOZfyDNTgNSfSkPGhnsFOaDvj9pG:kD3/7MVUNnwfFjD7ZtNbPC
TLSH
T13AC57C01F68685BAE84715B0202EE33FEF355D099718CBE3DBC46E72B47A3615E2924D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1649554

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

alterware_launcher.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent FormatMessageW LoadLibraryExA GetLastError RtlUnwind EncodePointer HeapFree HeapAlloc GetProcessHeap UnhandledExceptionFilter SetUnhandledExceptionFilter SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx DeleteCriticalSection GetStdHandle GetConsoleMode SetConsoleMode GetConsoleScreenBufferInfo SetConsoleCursorPosition FillConsoleOutputCharacterA FillConsoleOutputAttribute GetFileInformationByHandleEx GetCurrentThreadId SetConsoleTextAttribute InitializeCriticalSectionAndSpinCount TlsAlloc GetTimeZoneInformationForYear Sleep GetModuleHandleA GetProcAddress TlsGetValue TlsSetValue FreeEnvironmentStringsW DeleteProcThreadAttributeList CompareStringOrdinal AddVectoredExceptionHandler SetThreadStackGuarantee SwitchToThread CreateWaitableTimerExW SetWaitableTimer QueryPerformanceCounter RtlCaptureContext ReleaseMutex SetLastError GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW SetFileInformationByHandle GetCurrentProcessId WriteFileEx SleepEx ReadFileEx TerminateProcess QueryPerformanceFrequency GetSystemTimePreciseAsFileTime HeapReAlloc WaitForSingleObjectEx LoadLibraryA lstrlenW CreateMutexA FindNextFileW FindClose GetFileInformationByHandle CreateDirectoryW FindFirstFileExW MoveFileExW GetFinalPathNameByHandleW CopyFileExW GetFileType GetModuleHandleW SetCurrentDirectoryW CreateNamedPipeW GetFullPathNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW InitializeProcThreadAttributeList UpdateProcThreadAttribute MultiByteToWideChar WriteConsoleW WideCharToMultiByte ReadConsoleW CreateThread GetTempPathW GetSystemInfo GetExitCodeProcess TlsFree FreeLibrary ExitProcess CreateProcessA SetHandleInformation LocalFree DeleteFileW WaitForSingleObject LoadLibraryExW GetCommandLineW GetModuleFileNameW DuplicateHandle GetCurrentProcess CreateFileW CloseHandle GetCurrentThread PostQueuedCompletionStatus RaiseException

shell32

CommandLineToArgvW ShellExecuteExW

ole32

CoInitializeEx

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

ws2_32

ioctlsocket connect bind WSASocketW getsockname getpeername shutdown send WSASend getsockopt setsockopt WSAIoctl WSAGetLastError WSAStartup WSACleanup freeaddrinfo closesocket getaddrinfo recv

secur32

DeleteSecurityContext FreeContextBuffer DecryptMessage InitializeSecurityContextW EncryptMessage ApplyControlToken AcceptSecurityContext AcquireCredentialsHandleA FreeCredentialsHandle QueryContextAttributesW

crypt32

CertAddCertificateContextToStore CertEnumCertificatesInStore CertOpenStore CertGetCertificateChain CertDuplicateCertificateChain CertFreeCertificateChain CertCloseStore CertVerifyCertificateChainPolicy CertFreeCertificateContext CertDuplicateCertificateContext CertDuplicateStore

oleaut32

SysStringLen SysFreeString

ntdll

NtCreateFile NtReadFile NtDeviceIoControlFile NtCancelIoFileEx RtlNtStatusToDosError NtOpenFile NtWriteFile

api-ms-win-crt-convert-l1-1-0

_wtoi64

api-ms-win-crt-string-l1-1-0

wcsncmp strcpy_s

api-ms-win-crt-math-l1-1-0

round __setusermatherr ceil trunc pow truncf

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _initterm _get_initial_narrow_environment exit _initialize_narrow_environment _exit _c_exit __p___argc _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s _configure_narrow_argv terminate __p___argv abort _set_app_type _initterm_e _seh_filter_exe _cexit

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc malloc