reboot_launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
reboot_launcher.exe
Size 86KB
Sample260717-bmsg3acw2s
SHA256 07a3f464e479003a9c598cb8a8feab17cc55298d74de34315ae78c31256fb9c7
MD5 0a99c1fbc2e19352240c29620e90ce32
SHA1 660838cdb049777eec8c9fb32ee74605fb75c3ca
SHA512 b79200fe59fda6b04783dbf497c9cae62ef93ae288e013426c316dae645c76ae7a0632a901f469caa763abcc5b3082f52762e53d7dab00d9f9bd716f4e12d491
SSDEEP 1536:Zf1w1URPkttf87x1k2zaspKmJ/G6huT06G69nlE14x8hoUE3xIN1dh4+Y0e2QpoR:115RMEnk2uWKmJ/G6hujG69mkN3xI7TJ
TLSH
T12083AE17B3A901E9E79A433C8A531E89D376BC491765D7CF07D0822B1F63AD0AD3B650
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
reboot_launcher.exe

File Explorer

reboot_launcher.exe

.exe 86KB

reboot_launcher.exe

IMPHASH ca13cc8515a0f43cd80fd055d7c639f7
SHA256 07a3f464e479003a9c598cb8a8feab17cc55298d74de34315ae78c31256fb9c7
MD5 0a99c1fbc2e19352240c29620e90ce32
SHA1 660838cdb049777eec8c9fb32ee74605fb75c3ca
SHA512 b79200fe59fda6b04783dbf497c9cae62ef93ae288e013426c316dae645c76ae7a0632a901f469caa763abcc5b3082f52762e53d7dab00d9f9bd716f4e12d491
SSDEEP 1536:Zf1w1URPkttf87x1k2zaspKmJ/G6huT06G69nlE14x8hoUE3xIN1dh4+Y0e2QpoR:115RMEnk2uWKmJ/G6hujG69mkN3xI7TJ
TLSH
T12083AE17B3A901E9E79A433C8A531E89D376BC491765D7CF07D0822B1F63AD0AD3B650
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

app_links_plugin

SendAppLink AppLinksPluginCApiRegisterWithRegistrar

flutter_acrylic_plugin

FlutterAcrylicPluginRegisterWithRegistrar

local_notifier_plugin

LocalNotifierPluginRegisterWithRegistrar

screen_retriever_windows_plugin

ScreenRetrieverWindowsPluginCApiRegisterWithRegistrar

system_theme_plugin

SystemThemePluginRegisterWithRegistrar

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

window_manager_plugin

WindowManagerPluginRegisterWithRegistrar

windows_taskbar_plugin

WindowsTaskbarPluginRegisterWithRegistrar

flutter_windows

FlutterDesktopEngineDestroy FlutterDesktopEngineReloadSystemFonts FlutterDesktopEngineGetPluginRegistrar FlutterDesktopEngineGetMessenger FlutterDesktopViewControllerCreate FlutterDesktopEngineCreate FlutterDesktopViewControllerGetView FlutterDesktopViewControllerHandleTopLevelWindowProc FlutterDesktopMessengerSend FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSetCallback FlutterDesktopGetDpiForMonitor FlutterDesktopViewControllerDestroy FlutterDesktopMessengerAddRef FlutterDesktopMessengerRelease FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerLock FlutterDesktopMessengerUnlock FlutterDesktopViewGetHWND FlutterDesktopResyncOutputStreams

kernel32

GetStartupInfoW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateMutexW ReleaseMutex GetLastError CloseHandle IsDebuggerPresent GetCommandLineW LocalFree WideCharToMultiByte AllocConsole AttachConsole FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryA

user32

MonitorFromPoint LoadIconW LoadCursorW SetParent SetWindowLongPtrW GetWindowLongPtrW GetMessageW TranslateMessage DispatchMessageW ShowWindow SetWindowPos GetWindowPlacement SetForegroundWindow FindWindowW DefWindowProcW PostQuitMessage RegisterClassW UnregisterClassW CreateWindowExW DestroyWindow MoveWindow SetFocus GetClientRect

shell32

CommandLineToArgvW

ole32

CoUninitialize CoInitializeEx

msvcp140

?good@ios_base@std@@QEBA_NXZ ?_Xbad_function_call@std@@YAXXZ ?sync_with_stdio@ios_base@std@@SA_N_N@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Xlength_error@std@@YAXPEBD@Z ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception __current_exception_context __std_exception_copy __std_exception_destroy __C_specific_handler __std_type_info_compare _CxxThrowException memcmp memmove memcpy __std_terminate memset

api-ms-win-crt-runtime-l1-1-0

_initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _initterm_e _set_app_type _c_exit exit _register_onexit_function _crt_atexit _register_thread_local_exe_atexit_callback _invoke_watson _exit _invalid_parameter_noinfo_noreturn terminate _cexit _seh_filter_exe _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode _fileno __acrt_iob_func freopen_s __p__commode _dup2

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale