Resubmissions

18/07/2026, 16:07

260718-tk11jaav9w8

18/07/2026, 16:04

260718-tjbz1sfs5p7

General

  • Target
    PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
  • Size 22.7MB
  • Sample260718-tk11jaav9w
  • SHA256 3049faba7b69d515b2e036e9a8e28918d20e12f8d882f8e0d222e9b3909dcaaf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned JAR 1 IoCs

    Checks for missing JAR codesign signature.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • PrismLauncher-Windows-MSVC-Setup-11.0.3.exe
    .exe 22.7MB
  • $PLUGINSDIR/NScurl.dll
    .dll 6.0MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • Qt6Core.dll
    .dll 9.8MB
  • Qt6Gui.dll
    .dll 9.1MB
  • Qt6Network.dll
    .dll 1.7MB
  • Qt6NetworkAuth.dll
    .dll 285KB
  • Qt6OpenGL.dll
    .dll 1.9MB
  • Qt6Svg.dll
    .dll 617KB
  • Qt6Widgets.dll
    .dll 6.3MB
  • Qt6Xml.dll
    .dll 156KB
  • archive.dll
    .dll 716KB
  • bz2.dll
    .dll 75KB
  • cmark.dll
    .dll 140KB
  • iconengines/qsvgicon.dll
    .dll 69KB
  • icuuc.dll
    .dll 36KB
  • imageformats/qgif.dll
    .dll 46KB
  • imageformats/qicns.dll
    .dll 54KB
  • imageformats/qico.dll
    .dll 44KB
  • imageformats/qjpeg.dll
    .dll 564KB
  • imageformats/qsvg.dll
    .dll 38KB
  • imageformats/qtga.dll
    .dll 37KB
  • imageformats/qtiff.dll
    .dll 431KB
  • imageformats/qwbmp.dll
    .dll 35KB
  • imageformats/qwebp.dll
    .dll 549KB
  • jars/JavaCheck.jar
    .jar 1KB
  • jars/NewLaunch.jar
    .jar 13KB
  • jars/NewLaunchLegacy.jar
    .jar 23KB
  • liblzma.dll
    .dll 184KB
  • lz4.dll
    .dll 123KB
  • lzo2.dll
    .dll 112KB
  • platforms/qwindows.dll
    .dll 974KB
  • prismlauncher.exe
    .exe 9.2MB
  • prismlauncher_filelink.exe
    .exe 92KB
  • prismlauncher_updater.exe
    .exe 396KB
  • qrencode.dll
    .dll 47KB
  • qt.conf
    1B
  • qtlogging.ini
    609B
  • styles/qmodernwindowsstyle.dll
    .dll 215KB
  • tls/qcertonlybackend.dll
    .dll 100KB
  • tls/qschannelbackend.dll
    .dll 256KB
  • tomlplusplus-3.dll
    .dll 376KB
  • zlib1.dll
    .dll 88KB
  • zstd.dll
    .dll 642KB

PrismLauncher-Windows-MSVC-Setup-11.0.3.exe

  • IMPHASH f4639a0b3116c2cfc71144b88a929cfd
  • SHA256 3049faba7b69d515b2e036e9a8e28918d20e12f8d882f8e0d222e9b3909dcaaf
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Password
infected
Minor OS version
0
Major OS version
4
Entry point
13650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths