General

  • Target
    LeviLauncher.exe
  • Size 32.8MB
  • Sample260731-mcaeaael2w
  • SHA256 0d6a7513f8f64bdcf2c2026dfe922f06fe5e2159e2e4fc7c4fca702ece8da38c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • LeviLauncher.exe
    .exe 32.8MB

LeviLauncher.exe

  • IMPHASH d42595b695fc008ef2c56aabd8efd68e
  • SHA256 0d6a7513f8f64bdcf2c2026dfe922f06fe5e2159e2e4fc7c4fca702ece8da38c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
31:77:03:7e:f5:f3:66:a7:63:30:b5:3d:5e:e2:4e:27:07:b7:57:37:05:48:8d:c0:6e:48:ac:19:29:43:ca:a5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91420100MA49D9LU7P,CN=Wuhan Melody Cloud Network Technology Co.\, Ltd.,O=Wuhan Melody Cloud Network Technology Co.\, Ltd.,L=Wuhan,ST=Hubei,C=CN,1.3.6.1.4.1.311.60.2.1.1=#1305577568616e,1.3.6.1.4.1.311.60.2.1.2=#13054875626569,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Digest
f8:86:1f:bb:64:82:cc:5e:ed:12:4f:9f:ab:9c:8e:41:24:ed:bb:66
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91420100MA49D9LU7P,CN=Wuhan Melody Cloud Network Technology Co.\, Ltd.,O=Wuhan Melody Cloud Network Technology Co.\, Ltd.,L=Wuhan,ST=Hubei,C=CN,1.3.6.1.4.1.311.60.2.1.1=#1305577568616e,1.3.6.1.4.1.311.60.2.1.2=#13054875626569,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
6
Entry point
530656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths