assetdeliverylauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
assetdeliverylauncher.exe
Size 120KB
Sample260724-ycrjcaek3v
SHA256 5fff0d44dcf0915c69c70631ad48cda5a05d1868bfa08426714e5d34bbf4cdea
MD5 005dfeb881d405c3c69a9e21b494ef76
SHA1 54d3e8ae14896f25618fd9c40e7333de33590dae
SHA512 6488da4dc1bc577e57ccc6f1d61be98f6e809e09ac04a60f9d1b5af3e19d841a1aa847ce3ecf7ec0d41499685078ffc658768e63cb5aca4d2b5fa1ac97f72b89
SSDEEP 1536:reT6+th/RMoATBoW6/2b+uS1BRrgrouEohZ:rz+tJWoATiDui1BRWouEoh
TLSH
T11CC3B62A33A510B3D0B7C079AD86435AEDB17055133D55FF9241CEE9AF20BECBA38A51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
assetdeliverylauncher.exe

File Explorer

assetdeliverylauncher.exe

.exe 120KB

assetdeliverylauncher.exe

IMPHASH ed8610c3a58f9b1dcfca555d3c5d6448
SHA256 5fff0d44dcf0915c69c70631ad48cda5a05d1868bfa08426714e5d34bbf4cdea
MD5 005dfeb881d405c3c69a9e21b494ef76
SHA1 54d3e8ae14896f25618fd9c40e7333de33590dae
SHA512 6488da4dc1bc577e57ccc6f1d61be98f6e809e09ac04a60f9d1b5af3e19d841a1aa847ce3ecf7ec0d41499685078ffc658768e63cb5aca4d2b5fa1ac97f72b89
SSDEEP 1536:reT6+th/RMoATBoW6/2b+uS1BRrgrouEohZ:rz+tJWoATiDui1BRWouEoh
TLSH
T11CC3B62A33A510B3D0B7C079AD86435AEDB17055133D55FF9241CEE9AF20BECBA38A51
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Paul\source\repos\ConsoleApplication4\x64\Debug\ConsoleApplication4.pdb

kernel32

CloseHandle OpenThread SuspendThread ResumeThread CreateProcessA OpenProcess GetSystemInfo VirtualQueryEx ReadProcessMemory WriteProcessMemory GetModuleFileNameA CreateToolhelp32Snapshot Thread32First Thread32Next FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError GetModuleHandleW GetStartupInfoW InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WideCharToMultiByte MultiByteToWideChar RaiseException IsDebuggerPresent GetTickCount64 GetCurrentThreadId Sleep SleepConditionVariableSRW TryAcquireSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive GetProcAddress GetExitCodeProcess

msvcp140d

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??1_Lockit@std@@QEAA@XZ ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ _Query_perf_counter _Query_perf_frequency ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ??0_Lockit@std@@QEAA@H@Z

vcruntime140d

__vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_LoadLibraryExW memcmp memcpy memmove memset strrchr __std_exception_copy __std_exception_destroy _CxxThrowException __C_specific_handler __C_specific_handler_noexcept __std_type_info_destroy_list __current_exception __current_exception_context

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_crt_atexit _crt_at_quick_exit terminate _wmakepath_s _wsplitpath_s wcscpy_s __stdio_common_vsprintf_s strcat_s strcpy_s _free_dbg _seh_filter_dll __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit _register_onexit_function __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW malloc _callnewh __stdio_common_vfprintf __acrt_iob_func _CrtDbgReport strlen _invoke_watson __p___argv _initialize_onexit_table _execute_onexit_table _configure_narrow_argv

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

1024B

Virtual Size

613B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

948B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

assetdeliverylauncher.exe

kernel32

msvcp140d

vcruntime140d

vcruntime140_1d

ucrtbased

generic