Exploit_Launcher.zip
- SHA256 d7dd127a639a6a6d57568542fe0548f2bc062f117e40b15cbb5f8e7dd87c3e30
Static task
static1
Behavioral task
behavioral1
Sample
Exploit_Launcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Exploit_Launcher.exe
Resource
win11ltsc2024-20260709-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/Exploit_Launcher.exe |
| unpack002/$PLUGINSDIR/SpiderBanner.dll |
| unpack002/$PLUGINSDIR/StdUtils.dll |
| unpack002/$PLUGINSDIR/System.dll |
| unpack002/$PLUGINSDIR/WinShell.dll |
| unpack003/Windows Update Assistant.exe |
| unpack003/ffmpeg.dll |
| unpack003/libEGL.dll |
| unpack003/libGLESv2.dll |
| unpack003/resources/app.asar.unpacked/node_modules/@primno/dpapi/prebuilds/win32-x64/@primno+dpapi.node |
| unpack003/resources/app.asar.unpacked/node_modules/koffi/build/koffi/win32_ia32/koffi.node |
| unpack003/resources/app.asar.unpacked/node_modules/koffi/build/koffi/win32_x64/koffi.node |
| unpack003/resources/app.asar.unpacked/node_modules/sqlite3/lib/binding/napi-v6-win32-unknown-x64/node_sqlite3.node |
| unpack003/resources/elevate.exe |
| unpack003/vk_swiftshader.dll |
| unpack003/vulkan-1.dll |
| unpack002/$PLUGINSDIR/nsExec.dll |
| unpack002/$PLUGINSDIR/nsis7z.dll |
| unpack002/$R0/Uninstall Windows Update Assistant.exe |
| unpack006/$PLUGINSDIR/StdUtils.dll |
| unpack006/$PLUGINSDIR/System.dll |
| unpack006/$PLUGINSDIR/WinShell.dll |
| unpack006/$PLUGINSDIR/nsExec.dll |
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=49, id=1, productName=Unmarked objects,
count=1, id=48, version=9044,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=4, id=14, version=7299,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
Oct 19, 2022
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
count=2, id=257, version=30795,
count=146, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=60, id=261, version=27316,
count=1, id=260, version=27316,
count=30, id=259, version=30795,
count=222, id=261, version=30795,
count=55, id=260, version=30795,
count=1, id=256, version=30795,
count=136, id=264, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=138, id=261, version=33138,
count=12, id=260, version=33138,
count=6, id=259, version=33138,
count=1, id=253, version=34321,
count=9, id=259, version=34321,
count=14, id=260, version=34321,
count=43, id=261, version=34321,
count=5, id=257, version=33138,
count=131, id=1, productName=Unmarked objects,
count=3, id=265, version=34435,
count=1, id=256, version=34435,
count=1, id=255, version=34435,
count=1, id=258, version=34435,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=259, version=33145,
count=164, id=261, version=33145,
count=19, id=260, version=33145,
count=4, id=253, version=35207,
count=16, id=260, version=35207,
count=26, id=259, version=35207,
count=57, id=261, version=35207,
count=1, id=262, version=33145,
count=13, id=257, version=33145,
count=298, id=1, productName=Unmarked objects,
count=1, id=260, version=35222,
count=2, id=261, version=35222,
count=1, id=259, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=258, version=35222,
Unsigned PE
Checks for missing Authenticode signature.
count=164, id=261, version=33145,
count=12, id=260, version=33145,
count=9, id=259, version=33145,
count=4, id=253, version=35207,
count=16, id=260, version=35207,
count=12, id=259, version=35207,
count=60, id=261, version=35207,
count=1, id=262, version=33145,
count=13, id=257, version=33145,
count=302, id=1, productName=Unmarked objects,
count=1, id=260, version=35222,
count=2, id=261, version=35222,
count=1, id=259, version=35222,
count=1, id=256, version=35222,
count=1, id=255, version=35222,
count=1, id=258, version=35222,
Unsigned PE
Checks for missing Authenticode signature.
count=20, id=259, version=28900,
count=147, id=261, version=28900,
count=32, id=260, version=28900,
count=14, id=260, version=31823,
count=9, id=259, version=31823,
count=42, id=261, version=31823,
count=3, id=257, version=28900,
count=214, id=1, productName=Unmarked objects,
count=6, id=265, version=31942,
count=1, id=255, version=31942,
count=1, id=258, version=31942,
Unsigned PE
Checks for missing Authenticode signature.
count=9, id=241, version=40116,
count=119, id=243, version=40116,
count=24, id=242, version=40116,
count=17, id=259, version=23907,
count=30, id=261, version=23907,
count=17, id=260, version=23907,
count=7, id=203, version=65501,
count=89, id=1, productName=Unmarked objects,
count=1, id=264, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=46, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=259, version=26213,
count=152, id=261, version=26213,
count=35, id=261, version=26706,
count=16, id=260, version=26706,
count=20, id=259, version=26706,
count=19, id=260, version=26213,
count=15, id=257, version=26213,
count=190, id=1, productName=Unmarked objects,
count=43, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=131, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Unsigned PE
Checks for missing Authenticode signature.
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=4, id=14, version=7299,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Unsigned PE
Checks for missing Authenticode signature.
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=4, id=1, productName=Unmarked objects,
count=1, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Unsigned PE
Checks for missing Authenticode signature.
count=46, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,