BR[.]Mods[.]Launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BR.Mods.Launcher.exe
Size 318KB
Sample260802-hsprpaxbld
SHA256 6b58293f5829ee359613b4b5c548683fdf784634df4d30998fad37eafab94de2
MD5 e9f25bfa9723fe9ef2fcdb3f950644b8
SHA1 de73c565105032f4d05ee72d996d3ceb1e9d7e6f
SHA512 45edbfee41534252d5fb9ee8c2eab6ba450579b4b64edabefa716f8b54dfc2a8d6b70e15e2351363465c97a62dc2a3bd101d05c022cb7ba0e42577fc60b54e31
SSDEEP 6144:KqfB3fYvHN2t/yWmgWzwAHowdMZeiV83X9nSVe9:hBPYvQTAtdMZcX9n3
TLSH
T141648D48F2A454EDD01B5478815BF60FEA363C990350A9DB77E809683FE77E0EB7A211
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BR.Mods.Launcher.exe

File Explorer

BR.Mods.Launcher.exe

.exe 318KB

BR.Mods.Launcher.exe

IMPHASH 7ce685901df878d4186d975b468036ea
SHA256 6b58293f5829ee359613b4b5c548683fdf784634df4d30998fad37eafab94de2
MD5 e9f25bfa9723fe9ef2fcdb3f950644b8
SHA1 de73c565105032f4d05ee72d996d3ceb1e9d7e6f
SHA512 45edbfee41534252d5fb9ee8c2eab6ba450579b4b64edabefa716f8b54dfc2a8d6b70e15e2351363465c97a62dc2a3bd101d05c022cb7ba0e42577fc60b54e31
SSDEEP 6144:KqfB3fYvHN2t/yWmgWzwAHowdMZeiV83X9nSVe9:hBPYvQTAtdMZcX9n3
TLSH
T141648D48F2A454EDD01B5478815BF60FEA363C990350A9DB77E809683FE77E0EB7A211
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

239904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Gleisson\Downloads\Inject DLL\x64\Release\Inject DLL.pdb

shlwapi

PathRemoveFileSpecA

kernel32

WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetModuleFileNameA Process32First WriteProcessMemory FindFirstFileA FindNextFileA FindClose WaitForSingleObject GlobalLock CreateToolhelp32Snapshot GetExitCodeThread Sleep QueryFullProcessImageNameA DeleteFileA Process32Next CloseHandle VirtualAllocEx CreateRemoteThread VirtualFreeEx GlobalFree GlobalAlloc MultiByteToWideChar InitializeSListHead GetSystemTimeAsFileTime SetUnhandledExceptionFilter GetCurrentThreadId GetCurrentProcessId GetModuleHandleW GetStartupInfoW OpenProcess

user32

SetClipboardData SetCursorPos GetClipboardData EmptyClipboard DispatchMessageA GetSystemMetrics ShowWindow MessageBoxA DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage PeekMessageA UnregisterClassA PostQuitMessage RegisterClassExA UpdateWindow GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture CloseClipboard GetCursorPos OpenClipboard

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Throw_Cpp_error@std@@YAXH@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ _Thrd_detach _Cnd_do_broadcast_at_thread_exit ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?fail@ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Xbad_alloc@std@@YAXXZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Xlength_error@std@@YAXPEBD@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Id_cnt@id@locale@std@@0HA

wininet

HttpQueryInfoA InternetOpenUrlA InternetReadFile InternetCloseHandle InternetOpenA

d3d11

D3D11CreateDeviceAndSwapChain

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException memmove memset memcpy memcmp memchr __current_exception_context __current_exception __C_specific_handler __std_exception_copy __std_exception_destroy strstr

api-ms-win-crt-stdio-l1-1-0

_fseeki64 fsetpos ungetc setvbuf _set_fmode fgetpos fgetc fputc ftell __p__commode __acrt_iob_func __stdio_common_vsscanf fread __stdio_common_vsprintf _wfopen _get_stream_buffer_pointers fflush __stdio_common_vfprintf fseek fclose fwrite

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free _callnewh _set_new_mode malloc

api-ms-win-crt-string-l1-1-0

strlen strcmp strcpy_s

api-ms-win-crt-runtime-l1-1-0

terminate exit _c_exit _exit _initterm_e _initterm _get_narrow_winmain_command_line _beginthreadex _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-math-l1-1-0

acosf sinf cosf ceilf fmodf sqrtf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale