KayzeLauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
KayzeLauncher.exe
Size 1.7MB
Sample260723-wfk5matfpg
SHA256 d04750b5b40f0989ca0a9497a49c442d7a0103d568627a40cb9cfd3bd4a62c06
MD5 92bfa259b3f9288475da7efb548db756
SHA1 f3ef49b9778738a21e6bda756d8e9aabf3b76163
SHA512 4c6b4f10492ca5c2fc4abe49afb347bb8cb91a91eeeea867ddb05094e03eff7b670a082c0685dbfc983a1ef6e42d27974e41322d8a0eee488b1cc3ac0ff815b1
SSDEEP 24576:iA4sAxuIiKem8bqaitOZLiSZnnjS3GoRGXyei:rBAxuIEm0qaGy2knjSWoRGX
TLSH
T15E859D0CF6B5CAA9CDD6417948418963A2B37D3923D277CB4B606AE7BA53FC20173271
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KayzeLauncher.exe

File Explorer

KayzeLauncher.exe

.exe 1.7MB

KayzeLauncher.exe

IMPHASH a688250f78ed2ae2549d7a70d063dd52
SHA256 d04750b5b40f0989ca0a9497a49c442d7a0103d568627a40cb9cfd3bd4a62c06
MD5 92bfa259b3f9288475da7efb548db756
SHA1 f3ef49b9778738a21e6bda756d8e9aabf3b76163
SHA512 4c6b4f10492ca5c2fc4abe49afb347bb8cb91a91eeeea867ddb05094e03eff7b670a082c0685dbfc983a1ef6e42d27974e41322d8a0eee488b1cc3ac0ff815b1
SSDEEP 24576:iA4sAxuIiKem8bqaitOZLiSZnnjS3GoRGXyei:rBAxuIEm0qaGy2knjSWoRGX
TLSH
T15E859D0CF6B5CAA9CDD6417948418963A2B37D3923D277CB4B606AE7BA53FC20173271
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

525892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\trypk\Desktop\AND\PROGRAMMING\KayzeLauncher\x64\Release\KAYZE Discord Quest Completer.pdb

kernel32

GetModuleHandleW GetProcAddress LoadLibraryA GetLocaleInfoA IsDBCSLeadByte DeleteFileA FindClose FindFirstFileA FindNextFileA GetFileAttributesA RemoveDirectoryA SetFileAttributesA CloseHandle WaitForSingleObject Sleep TerminateProcess CreateProcessA GetModuleFileNameA CopyFileA MoveFileExA WriteConsoleW SetEndOfFile HeapSize CreateFileW HeapReAlloc GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW CreateDirectoryW GetFileSizeEx SetFilePointerEx ReadConsoleW GetConsoleMode GetModuleHandleA FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetCommandLineW GetCommandLineA GetModuleFileNameW WriteFile GetStdHandle GetModuleHandleExW ExitProcess GetCurrentProcess ReadFile FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError GetLastError RaiseException FreeLibrary QueryPerformanceFrequency QueryPerformanceCounter VerSetConditionMask WideCharToMultiByte RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock OutputDebugStringA GlobalAlloc GetConsoleOutputCP GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetStartupInfoW SetUnhandledExceptionFilter ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind

user32

GetClipboardData EmptyClipboard GetKeyboardLayout TrackMouseEvent CloseClipboard DefWindowProcW UnregisterClassW RegisterClassExW CreateWindowExW IsChild SetClipboardData OpenClipboard GetMessageExtraInfo DestroyWindow LoadIconW FillRect EndPaint BeginPaint UpdateWindow GetSystemMetrics CreateWindowExA RegisterClassExA PostQuitMessage DefWindowProcA PeekMessageW DispatchMessageW DispatchMessageA TranslateMessage GetMessageA EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow LoadCursorW SetWindowLongPtrW SetWindowLongW GetWindowLongW WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC SetForegroundWindow GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState SetFocus BringWindowToTop IsIconic SetWindowPos SetLayeredWindowAttributes ShowWindow

gdi32

GetDeviceCaps GetStockObject

shell32

ShellExecuteA ShellExecuteW

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext ImmReleaseContext

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

urlmon

URLDownloadToFileA

wininet

InternetReadFile InternetOpenUrlA InternetCloseHandle InternetOpenA DeleteUrlCacheEntryA

Name

.text

Size

695KB

Virtual Size

694KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

889KB

Virtual Size

889KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

KayzeLauncher.exe

kernel32

user32

gdi32

shell32

imm32

d3dcompiler_47

dwmapi

d3d11

urlmon

wininet

generic