Exploit-Launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Exploit-Launcher.exe
Size 1.8MB
Sample260723-1fafcawsbt
SHA256 f934beb902f37c69ea839621582ff71beedb8e16e55d0778e0054e91e3e7bf1e
MD5 91768c998a1e6dc59a9f8b016e716216
SHA1 0aeba4cc3241f66771a5d81c987d9ff79c80de6e
SHA512 bc55d9ba142e8b3ff509582ee42a910505ff0453fd1f0bdf74ad7b7105825458836849fcb9385c79e6d384250373a956701ad08ba1096b221ef9170a7173467a
SSDEEP 24576:Vxq+3WwYxjkNn8pixstoWed3YGXfP4dsUAmPsbx5UExVXShWZ:zq/NmnDWmoQP4dLAFQExVXS
TLSH
T1A8853A4BF74888B5C230D67ACA564E31DB717C8D943C679B17C82EBB2E4634166B6F02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Exploit-Launcher.exe

File Explorer

Exploit-Launcher.exe

.exe 1.8MB

Exploit-Launcher.exe

IMPHASH f0f76e482c2ac223ba4084f53f93d9de
SHA256 f934beb902f37c69ea839621582ff71beedb8e16e55d0778e0054e91e3e7bf1e
MD5 91768c998a1e6dc59a9f8b016e716216
SHA1 0aeba4cc3241f66771a5d81c987d9ff79c80de6e
SHA512 bc55d9ba142e8b3ff509582ee42a910505ff0453fd1f0bdf74ad7b7105825458836849fcb9385c79e6d384250373a956701ad08ba1096b221ef9170a7173467a
SSDEEP 24576:Vxq+3WwYxjkNn8pixstoWed3YGXfP4dsUAmPsbx5UExVXShWZ:zq/NmnDWmoQP4dLAFQExVXS
TLSH
T1A8853A4BF74888B5C230D67ACA564E31DB717C8D943C679B17C82EBB2E4634166B6F02
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1587776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\miroy\Desktop\копия защиты\CheatHub Antikleak\CPPLoader\x64\Release\Exploit Launcher.pdb

kernel32

GetLocalTime MapViewOfFile GetVolumeInformationA DeviceIoControl GetWindowsDirectoryA LocalFree DeleteFileW IsDebuggerPresent DebugBreak OutputDebugStringW SetUnhandledExceptionFilter SetLastError HeapAlloc HeapFree GetProcessHeap ReleaseSemaphore ReleaseMutex WaitForSingleObjectEx OpenSemaphoreW CreateMutexExW CreateSemaphoreExW ExitProcess GetCurrentThreadId GetFileAttributesW GetTickCount64 GetModuleFileNameA GetModuleHandleW GetModuleHandleExW FormatMessageW MoveFileExW AllocConsole SetConsoleTitleA GetConsoleWindow OutputDebugStringA LoadLibraryExW GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW CopyFile2 AreFileApisANSI CreateFile2 GetTempPathW SetFileInformationByHandle GetFinalPathNameByHandleW GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose CreateDirectoryW GetLocaleInfoEx FormatMessageA GetCurrentProcessId WriteFile FlushFileBuffers CreateFileMappingW SetFileAttributesW CreateFileW WideCharToMultiByte MultiByteToWideChar SetDllDirectoryW LoadLibraryW LoadLibraryA GetProcAddress GetModuleFileNameW FreeLibrary GetWindowsDirectoryW CreateProcessW GetExitCodeProcess Sleep CreateMutexA WaitForSingleObject GetLastError CloseHandle GetShortPathNameW SetCurrentDirectoryW SetEnvironmentVariableW GlobalMemoryStatusEx GetEnvironmentVariableW InitializeSListHead

user32

MessageBoxA EnumWindows GetClassNameW GetMessageA TranslateMessage IsWindowVisible SendMessageA PostMessageA ShowWindowAsync SetWindowRgn GetSystemMetrics ReleaseCapture DestroyWindow GetWindowTextW DispatchMessageA LoadCursorA LoadIconA DefWindowProcA PostQuitMessage RegisterClassExA CreateWindowExA SetWindowPos ShowWindow PostMessageW IsWindow GetClientRect MessageBoxW

gdi32

CreateRoundRectRgn

advapi32

RegOpenKeyExW RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegDeleteKeyValueA EventRegister EventSetInformation RegGetValueW RegQueryValueExW RegCloseKey EventUnregister EventWriteTransfer

shell32

ShellExecuteW SHGetKnownFolderPath

ole32

CoUninitialize CoTaskMemFree CoInitializeEx CoTaskMemAlloc

msvcp140

?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ _Thrd_join _Thrd_id _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??7ios_base@std@@QEBA_NXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A _Xtime_get_ticks _Mtx_lock _Mtx_unlock ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Random_device@std@@YAIXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setf@ios_base@std@@QEAAHHH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Xinvalid_argument@std@@YAXPEBD@Z _Thrd_detach ??Bios_base@std@@QEBA_NXZ ?eof@ios_base@std@@QEBA_NXZ ?setf@ios_base@std@@QEAAHH@Z

bcrypt

BCryptGenerateSymmetricKey BCryptEncrypt BCryptDecrypt BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptDestroyKey BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash BCryptVerifySignature BCryptImportKeyPair BCryptGetProperty BCryptGenRandom BCryptSetProperty

wininet

InternetOpenA InternetReadFile InternetSetOptionA HttpOpenRequestA InternetConnectA InternetCloseHandle HttpQueryInfoA InternetCrackUrlA HttpSendRequestA

crypt32

CertFindCertificateInStore CertCloseStore CryptMsgControl CryptMsgGetParam CryptMsgClose CryptProtectData CertFreeCertificateContext CertGetNameStringW CryptQueryObject CryptUnprotectData

shlwapi

PathFileExistsW

urlmon

URLDownloadToFileW

wintrust

WinVerifyTrust

vcruntime140

__std_terminate __current_exception_context __current_exception wcsrchr __C_specific_handler _purecall __std_exception_copy __std_exception_destroy _CxxThrowException memcmp memcpy memmove memset wcsstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcslen strncpy_s strlen isdigit isspace towlower strcpy_s isalnum tolower _wcsicmp wcscmp

api-ms-win-crt-heap-l1-1-0

_callnewh malloc _set_new_mode free

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _configure_wide_argv _initterm _set_app_type _seh_filter_exe _cexit _crt_atexit exit _initterm_e _register_onexit_function _initialize_onexit_table set_terminate _exit _errno _invalid_parameter_noinfo _c_exit _register_thread_local_exe_atexit_callback _initialize_wide_environment _beginthreadex abort terminate

api-ms-win-crt-stdio-l1-1-0

freopen_s __stdio_common_vswprintf _wfreopen_s __acrt_iob_func _get_stream_buffer_pointers fclose fflush fgetc fgetpos fputc fread __stdio_common_vsprintf_s fsetpos __p__commode _fseeki64 fwrite setvbuf _set_fmode ungetc

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-convert-l1-1-0

strtol wcstol _ultow_s strtod _wtoi

api-ms-win-crt-math-l1-1-0

floor __setusermatherr ceilf

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale