LaunchPad[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
LaunchPad.exe
Size 11.5MB
Sample260730-vxkpradn7y
SHA256 222cf1895c978b64eac99715e3a8e082b2de669fabf8d7905dbfd3da6201df25
MD5 5a605b328b05da51c3d92a3f8fda87f6
SHA1 ff85f30308754f402eb6ee1e94b38f23ed33b36c
SHA512 63da16a28e10cb79b824cb5f3224edd3d29bed41da26e14e72877151e6f0a2f975b08493da3482ffa3885be9f7d2ae88ae007ca36ed8cdbd9e9e1ba0f260a680
SSDEEP 196608:/ZFw5fvCC1QwiPAu/joIPwBMytuijg6cdaAmCJo/4SKCkUByryKHsvN71x4js9yq:/ZFw5fvCC1QwWuIwHtuijg6cdaQ2/4Sr
TLSH
T14BC62294FE51C026D5AE05B993660621BB663F42C71C5DDF2B84348D7E339CAEB3422E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LaunchPad.exe

File Explorer

LaunchPad.exe

.exe 11.5MB

LaunchPad.exe

IMPHASH ed096ee03c085689efb7956bd9f4a2b9
SHA256 222cf1895c978b64eac99715e3a8e082b2de669fabf8d7905dbfd3da6201df25
MD5 5a605b328b05da51c3d92a3f8fda87f6
SHA1 ff85f30308754f402eb6ee1e94b38f23ed33b36c
SHA512 63da16a28e10cb79b824cb5f3224edd3d29bed41da26e14e72877151e6f0a2f975b08493da3482ffa3885be9f7d2ae88ae007ca36ed8cdbd9e9e1ba0f260a680
SSDEEP 196608:/ZFw5fvCC1QwiPAu/joIPwBMytuijg6cdaAmCJo/4SKCkUByryKHsvN71x4js9yq:/ZFw5fvCC1QwWuIwHtuijg6cdaQ2/4Sr
TLSH
T14BC62294FE51C026D5AE05B993660621BB663F42C71C5DDF2B84348D7E339CAEB3422E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

219481

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

urlmon

CreateURLMoniker CreateURLMonikerEx

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueA

wininet

InternetCloseHandle InternetQueryOptionA HttpQueryInfoA InternetReadFileExA InternetOpenA InternetOpenUrlA InternetOpenUrlW InternetConnectA InternetGetLastResponseInfoA FtpGetFileA FtpPutFileA FtpDeleteFileA FtpRenameFileA FtpCreateDirectoryA FtpRemoveDirectoryA FtpSetCurrentDirectoryA FtpGetCurrentDirectoryA InternetFindNextFileA FtpFindFirstFileA

rpcrt4

RpcStringFreeA UuidCreate UuidToStringA

ws2_32

WSAStartup WSACleanup gethostbyname

kernel32

UnmapViewOfFile CloseHandle WriteFile GetFileSize MapViewOfFile CreateFileMappingA CreateFileW GetModuleFileNameW CreateFileA GetTickCount InitializeCriticalSection GetTempPathA GetTempPathW LoadLibraryA LoadLibraryW GetModuleFileNameA GetCommandLineW GlobalFree FreeLibrary GetProcAddress GetVersionExA GlobalSize DeleteFileA DeleteFileW ReadFile InterlockedIncrement InterlockedDecrement SetCurrentDirectoryW VirtualProtect GetCurrentThreadId MultiByteToWideChar WideCharToMultiByte WaitForSingleObject MoveFileExW VirtualFreeEx WriteProcessMemory VirtualAllocEx OpenProcess HeapAlloc GetProcessHeap VirtualAlloc VirtualFree GlobalAlloc HeapFree GetFileAttributesA GetFileAttributesW GetFileAttributesExA GetFileAttributesExW SetLastError CreateDirectoryA CreateDirectoryW CopyFileA CopyFileW MoveFileA MoveFileW SetFilePointer RemoveDirectoryA RemoveDirectoryW FindClose FindNextFileA FindFirstFileA FindNextFileW FindFirstFileW GetComputerNameA GetComputerNameW GetSystemDirectoryA GetSystemDirectoryW GetWindowsDirectoryA GetWindowsDirectoryW GetEnvironmentVariableA GetEnvironmentVariableW SetEnvironmentVariableA SetEnvironmentVariableW WritePrivateProfileStringA GetShortPathNameA Process32NextW Process32FirstW CreateToolhelp32Snapshot GlobalLock GlobalUnlock Sleep EnterCriticalSection CreateThread LeaveCriticalSection CopyFileExW GetLastError SystemTimeToFileTime FileTimeToSystemTime HeapSize LCMapStringA LCMapStringW GetStdHandle RtlUnwind HeapReAlloc GetModuleHandleA GetStartupInfoW UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA SetHandleCount GetFileType GetStartupInfoA SetUnhandledExceptionFilter IsBadCodePtr GetStringTypeA GetStringTypeW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetStdHandle FlushFileBuffers GetLocaleInfoA GetCPInfo GetSystemInfo VirtualQuery InterlockedExchange ExitProcess TerminateProcess GetCurrentProcess HeapDestroy HeapCreate IsBadWritePtr GetACP GetOEMCP IsBadReadPtr SetEndOfFile

user32

GetUserObjectInformationA OpenDesktopA SetThreadDesktop IsZoomed LoadImageA GetClipboardData OpenClipboard EmptyClipboard SetClipboardData CloseClipboard LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA PostThreadMessageA LoadIconA LoadCursorA RegisterClassExA GetFocus SetFocus GetCursorPos ClientToScreen ReleaseCapture GetThreadDesktop EndPaint SetCapture GetWindowThreadProcessId PostMessageA DefWindowProcA GetDC UpdateLayeredWindow ReleaseDC LoadImageW IsWindowUnicode UpdateWindow MessageBoxA FlashWindowEx CreatePopupMenu CreateWindowExA SetForegroundWindow TrackPopupMenu DestroyWindow DestroyMenu InsertMenuW DestroyIcon SetWindowTextW SetWindowTextA GetWindowTextW IntersectRect CreateWindowExW CloseDesktop ChangeDisplaySettingsA EnumDisplaySettingsW ChangeDisplaySettingsW MessageBoxW GetWindow GetSysColor BeginPaint FindWindowW GetWindowTextA InvalidateRect KillTimer SetTimer PostQuitMessage SetWindowLongA SetLayeredWindowAttributes GetWindowRect GetWindowLongA AdjustWindowRectEx ShowWindow SystemParametersInfoA GetSystemMetrics GetClientRect SetWindowPos RedrawWindow IsWindow SendMessageA PtInRect IsIconic GetDesktopWindow IsWindowVisible GetMenuItemCount

gdi32

CreateSolidBrush PatBlt CreateDIBSection GetBkColor DeleteObject GetRgnBox CombineRgn CreateRectRgnIndirect GetTextExtentPoint32W GetTextMetricsA GetClipRgn OffsetRgn ExtTextOutW GetCurrentObject GetObjectA GetCurrentPositionEx GetClipBox CreateCompatibleDC SelectObject DeleteDC SelectClipRgn CreateRectRgn GetTextColor

comdlg32

GetSaveFileNameA GetOpenFileNameW GetSaveFileNameW ChooseColorA GetOpenFileNameA

advapi32

RegDeleteValueA GetUserNameW GetUserNameA RegSetValueExW RegCloseKey RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegCreateKeyExW RegDeleteKeyA RegDeleteKeyW RegOpenKeyExW RegDeleteValueW RegQueryValueExW RegEnumKeyA RegEnumKeyW RegEnumValueA RegEnumValueW RegQueryInfoKeyA RegQueryInfoKeyW

shell32

SHFileOperationW SHFileOperationA SHChangeNotify Shell_NotifyIconW ShellExecuteW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetPathFromIDListA DragQueryFileW DragQueryFileA ShellExecuteA

ole32

RevokeDragDrop RegisterDragDrop ReleaseStgMedium CreateStreamOnHGlobal CoCreateInstance OleUninitialize OleInitialize CoGetMalloc CoUninitialize CoInitialize CoTaskMemAlloc OleSetContainedObject OleCreate CLSIDFromProgID CLSIDFromString CoTaskMemFree

oleaut32

VariantInit LoadTypeLibEx VariantChangeType SafeArrayGetDim SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetElement DispInvoke VariantClear SysStringLen QueryPathOfRegTypeLi SysAllocStringLen SystemTimeToVariantTime VariantTimeToSystemTime SysAllocString SysFreeString SysReAllocString SysReAllocStringLen