Launcher[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Launcher.exe
Size 5.3MB
Sample260809-bcpcnaxfnf
SHA256 b21e7a7c0b8f89146195d681c61abece4635a4e761d5500c878619ccec38a2eb
MD5 eebd949f31c03b9c30ea083764d71702
SHA1 fd585f99e0242ace0f30014c04783ee9f359d408
SHA512 b3e57c30897fea0237f5493f2f46337364e28d6ac35ee30412b9c93a902007c2eca0314cea64c80499558d28aed84cb51575b165492232a720bde9a5721a063d
SSDEEP 49152:ioNsVBMHhHYi1oZ6GXKeGS1B6/TDlzDPPmug7zW02VJaOX9bbKJelrm0obl/ZAY3:imecoBT14Dlz7+HTKbPn+v
TLSH
T12C467C0FE34587EDF64AC07483CFAA23D662B579462972EB57C02ED01F99BD07A08719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Launcher.exe

File Explorer

Launcher.exe

.exe 5.3MB

Launcher.exe

IMPHASH 1c9b21595a3c7cbed5cb534e66883695
SHA256 b21e7a7c0b8f89146195d681c61abece4635a4e761d5500c878619ccec38a2eb
MD5 eebd949f31c03b9c30ea083764d71702
SHA1 fd585f99e0242ace0f30014c04783ee9f359d408
SHA512 b3e57c30897fea0237f5493f2f46337364e28d6ac35ee30412b9c93a902007c2eca0314cea64c80499558d28aed84cb51575b165492232a720bde9a5721a063d
SSDEEP 49152:ioNsVBMHhHYi1oZ6GXKeGS1B6/TDlzDPPmug7zW02VJaOX9bbKJelrm0obl/ZAY3:imecoBT14Dlz7+HTKbPn+v
TLSH
T12C467C0FE34587EDF64AC07483CFAA23D662B579462972EB57C02ED01F99BD07A08719
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2516336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Launcher.pdb

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

comctl32

ord410 ord413

shell32

DragFinish SHCreateItemFromParsingName ShellExecuteExW DragQueryFileW

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

SetFileTime WriteFile PostQueuedCompletionStatus ReadFile FindClose FindNextFileW FindFirstFileExW SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes CancelIoEx GetCurrentThreadId Sleep CloseHandle SetFileInformationByHandle GetLastError MoveFileExW SwitchToThread CreateHardLinkW GetCurrentThread SetThreadPriority WaitForMultipleObjects GetFileInformationByHandleEx SetThreadStackGuarantee CreateFileW GetCurrentProcess WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex CreateWaitableTimerExW SetWaitableTimer GetModuleHandleA GetModuleFileNameW LoadLibraryExW SetThreadErrorMode GetProcAddress ReadFileEx SleepEx WriteFileEx SetHandleInformation CreateThread GetFullPathNameW GetFileInformationByHandle CreateDirectoryW ExitProcess CreateEventW CancelIo FreeLibrary CreateMutexW GlobalFree SetFilePointerEx CreateProcessW WaitForSingleObject GetOverlappedResult GetExitCodeProcess GetFileAttributesW DuplicateHandle GetTempPathW DeleteFileW SetFileAttributesW CreateSymbolicLinkW CopyFileExW GetSystemTimeAsFileTime InitializeSListHead GetWindowsDirectoryW GetSystemDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimePreciseAsFileTime QueryPerformanceCounter GetModuleHandleW QueryPerformanceFrequency GetEnvironmentVariableW HeapAlloc WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle GetCurrentDirectoryW RtlVirtualUnwind lstrlenW LoadLibraryA RtlLookupFunctionEntry RtlCaptureContext LoadLibraryW FormatMessageW GlobalAlloc MultiByteToWideChar WideCharToMultiByte GlobalSize HeapReAlloc HeapFree GetProcessHeap GlobalUnlock GlobalLock AddVectoredExceptionHandler Process32NextW Process32FirstW CreateToolhelp32Snapshot CompareStringOrdinal GetSystemInfo SetUnhandledExceptionFilter

user32

ClipCursor SetCursor ShowCursor IsIconic IsProcessDPIAware SetWindowPlacement GetWindowRect GetCursorPos GetClipCursor EnableMenuItem PostMessageW SetCursorPos SetWindowTextW SetWindowDisplayAffinity AdjustWindowRectEx SendMessageW FindWindowW GetForegroundWindow GetWindowThreadProcessId AttachThreadInput GetSystemMenu RegisterWindowMessageA SetForegroundWindow BringWindowToTop ShowWindow SystemParametersInfoA GetWindowLongW SetWindowLongW SetWindowPos GetMenu GetWindowLongPtrW DefWindowProcW GetClassNameW GetWindowPlacement GetSystemMetrics LoadCursorW DestroyCursor CreateIconFromResourceEx FlashWindowEx GetWindowTextW GetWindowTextLengthW CreateIcon GetClientRect SetWindowLongPtrW CreateWindowExW DestroyWindow TranslateMessage DispatchMessageW PeekMessageW DestroyIcon MsgWaitForMultipleObjectsEx EmptyClipboard SetClipboardData GetClassInfoExW MonitorFromPoint ChangeDisplaySettingsExW RedrawWindow GetMonitorInfoW SetFocus GetAsyncKeyState OpenClipboard MonitorFromWindow ReleaseCapture GetRawInputData CloseClipboard ValidateRect MapVirtualKeyW IsClipboardFormatAvailable MapVirtualKeyExW GetKeyState ToUnicodeEx GetKeyboardState TrackMouseEvent ScreenToClient GetTouchInputInfo CloseTouchInputHandle MonitorFromRect SetCapture SendInput RegisterTouchWindow GetActiveWindow RegisterClassExW SetActiveWindow EnumDisplayMonitors ReleaseDC ClientToScreen GetDC GetClipboardData RegisterRawInputDevices GetKeyboardLayout InvalidateRgn

ole32

CoCreateInstance OleInitialize RegisterDragDrop CoInitializeEx CoUninitialize RevokeDragDrop

combase

CoTaskMemFree

ntdll

NtCancelIoFileEx NtDeviceIoControlFile NtCreateFile NtWriteFile RtlNtStatusToDosError NtOpenFile NtReadFile NtCreateNamedPipeFile

advapi32

RevertToSelf ImpersonateAnonymousToken SystemFunction036

shlwapi

AssocQueryStringW

ws2_32

WSASend shutdown send freeaddrinfo getaddrinfo WSACleanup WSAStartup bind getpeername getsockopt connect ioctlsocket WSASocketW closesocket recv WSAIoctl getsockname WSAGetLastError setsockopt

bcrypt

BCryptGenRandom

opengl32

wglGetProcAddress wglGetCurrentContext wglMakeCurrent wglDeleteContext wglGetCurrentDC wglCreateContext wglShareLists

gdi32

DeleteObject SwapBuffers ChoosePixelFormat GetDeviceCaps CreateRectRgn SetPixelFormat DescribePixelFormat

imm32

ImmAssociateContextEx ImmGetCompositionStringW ImmGetContext ImmSetCandidateWindow ImmReleaseContext ImmSetCompositionWindow

uxtheme

SetWindowTheme

vcruntime140

memcmp memcpy __CxxFrameHandler3 memmove memset __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-math-l1-1-0

sinf roundf __setusermatherr fminf sin fmaxf cos ceilf powf floorf trunc _hypotf floor fmod atan2f round cosf expf acosf cbrtf exp2f

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _c_exit strerror _wassert _initialize_onexit_table _seh_filter_exe _set_app_type _register_onexit_function terminate _configure_narrow_argv _register_thread_local_exe_atexit_callback _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit __p___argc __p___argv

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale