cskolauncher[.]exe

General

Target
cskolauncher.exe
Size 199KB
Sample260728-pl9a3swelf
SHA256 c22a0eb523c8f94edfd4c8d9e741e83d61ab6dbe3a2f9f9e5611a3fd94720c34
MD5 b12a19030a7d367ba38e55bbf04c1b00
SHA1 c5953140d3fc7a6f1f6caf8c31ae1700570371c5
SHA512 faca79cfe17438164cd4b44c9c4286919b11041d8a7221ca2c050f47d33c1338f00b82b9a2737c5094db0c2bfb134af5aadb756853661ad1064f4d1fe6e8f536
SSDEEP 3072:l3nSqxSNXYOu+KeVypXZeag+UVxEUg+IT1Q28BB8Ye3+y:l3nSqspRjZVyRoj5k1Qjj8Ye3+y
TLSH
T123147B217A81C032D173027146F8EB31567EFDB24F665ACBB7D81B4E1A306D1AA36763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cskolauncher.exe

File Explorer

cskolauncher.exe

.exe 199KB

cskolauncher.exe

IMPHASH ba1804dfe881ac2af01a88009b6d5aa3
SHA256 c22a0eb523c8f94edfd4c8d9e741e83d61ab6dbe3a2f9f9e5611a3fd94720c34
MD5 b12a19030a7d367ba38e55bbf04c1b00
SHA1 c5953140d3fc7a6f1f6caf8c31ae1700570371c5
SHA512 faca79cfe17438164cd4b44c9c4286919b11041d8a7221ca2c050f47d33c1338f00b82b9a2737c5094db0c2bfb134af5aadb756853661ad1064f4d1fe6e8f536
SSDEEP 3072:l3nSqxSNXYOu+KeVypXZeag+UVxEUg+IT1Q28BB8Ye3+y:l3nSqspRjZVyRoj5k1Qjj8Ye3+y
TLSH
T123147B217A81C032D173027146F8EB31567EFDB24F665ACBB7D81B4E1A306D1AA36763
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

32838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_BIND IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

DeleteUrlCacheEntry

urlmon

URLDownloadToFileA

kernel32

IsValidLocale SetEnvironmentVariableA SetEndOfFile FreeLibrary Sleep GetProcAddress CopyFileA LoadLibraryA DeleteFileA WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW GetLastError HeapFree HeapAlloc ExitProcess GetModuleHandleExW AreFileApisANSI GetCommandLineA GetCPInfo RaiseException RtlUnwind IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetUserDefaultLCID EnumSystemLocalesW IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCurrentThreadId GetProcessHeap GetStdHandle WriteFile GetModuleFileNameW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize LoadLibraryExW FindClose FindFirstFileExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetFileType GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW CloseHandle ReadFile SetFilePointerEx HeapReAlloc GetTimeZoneInformation OutputDebugStringW SetStdHandle WriteConsoleW FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFullPathNameW GetCurrentDirectoryW CreateFileW ReadConsoleW

Sharing