surya-launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
surya-launcher.exe
Size 17.1MB
Sample260925-vb6ebssx5j
SHA256 16fd4d6d813f72438c09c06c5f026f08993d2f551997d9dd4b86187a24b6f56c
MD5 dc34bbdcf05cefb7d76600ba839a9050
SHA1 24fd5f1b2fc1d650f5bcc9a02a3f6b7e1933996b
SHA512 ed2d05d460c3e80272d4c931399ffdbf1258cfbde75e07e3db12164a3218f17934c94c84b601cb6b0e90806d433f703c800f6e622ae7881805a73b06a7013475
SSDEEP 98304:hoCrIQAKqFNxKhZjcJiLmj+FsyiyL/KXD1uDChQ6xc8zlSUaTKdmKNb+YmMJjzzu:3eYhZx9+1OCm6xtzl5db+YmMJj/G
TLSH
T16D076C12B7DB94ECD85AC470C34B5B672E11748A0B267DEB46C8D6393F79BE01E28718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
surya-launcher.exe

File Explorer

surya-launcher.exe

.exe 17.1MB

surya-launcher.exe

IMPHASH 4f623a25deae37c3fd8ca26335e77e1e
SHA256 16fd4d6d813f72438c09c06c5f026f08993d2f551997d9dd4b86187a24b6f56c
MD5 dc34bbdcf05cefb7d76600ba839a9050
SHA1 24fd5f1b2fc1d650f5bcc9a02a3f6b7e1933996b
SHA512 ed2d05d460c3e80272d4c931399ffdbf1258cfbde75e07e3db12164a3218f17934c94c84b601cb6b0e90806d433f703c800f6e622ae7881805a73b06a7013475
SSDEEP 98304:hoCrIQAKqFNxKhZjcJiLmj+FsyiyL/KXD1uDChQ6xc8zlSUaTKdmKNb+YmMJjzzu:3eYhZx9+1OCm6xtzl5db+YmMJj/G
TLSH
T16D076C12B7DB94ECD85AC470C34B5B672E11748A0B267DEB46C8D6393F79BE01E28718
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10165104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

surya_launcher.pdb

kernel32

CompareStringOrdinal GetWindowsDirectoryW GetSystemDirectoryW LoadLibraryExA FreeEnvironmentStringsW GetEnvironmentStringsW LockFileEx GetOverlappedResult ReadFile QueryPerformanceCounter GetStdHandle ReadFileEx WriteFileEx GetSystemTimePreciseAsFileTime MapViewOfFile CreateFileMappingW VirtualProtect LoadLibraryA GetUserDefaultLocaleName SetDefaultDllDirectories SetDllDirectoryW DuplicateHandle GetCommandLineW GetEnvironmentVariableW UnmapViewOfFile GetSystemInfo GlobalAlloc GlobalUnlock GlobalSize GlobalLock HeapReAlloc WriteConsoleW GetConsoleMode GetConsoleOutputCP QueryPerformanceFrequency GetModuleHandleW CancelIo GetModuleHandleA LoadLibraryW lstrlenW CloseHandle SetLastError GlobalFree RtlCaptureContext RtlLookupFunctionEntry WideCharToMultiByte AddVectoredExceptionHandler LocaleNameToLCID GetCurrentDirectoryW RtlVirtualUnwind IsProcessorFeaturePresent GetSystemTimeAsFileTime GetProcessHeap HeapFree HeapAlloc FormatMessageW InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter GetModuleHandleExW GetModuleFileNameW GetCurrentThread LoadLibraryExW SetThreadErrorMode Sleep GetCurrentThreadId SwitchToThread FreeLibrary FindClose GetCurrentProcess SetFileInformationByHandle GetCurrentProcessId OpenProcess WaitForSingleObject GetExitCodeProcess GetProcessId SleepEx SetFilePointerEx FlushFileBuffers CreateThread GetFullPathNameW GetProcAddress CreateEventW CreateFileW SetFileTime GetFileInformationByHandle GetFileInformationByHandleEx CreateProcessW TerminateProcess WaitForMultipleObjects CreateDirectoryW SetThreadStackGuarantee MoveFileExW FindFirstFileExW WaitForSingleObjectEx CreateMutexA ReleaseMutex GetFinalPathNameByHandleW DeleteFileW CreateWaitableTimerExW SetWaitableTimer GetFileAttributesW FlsFree FlsAlloc FlsSetValue IsThreadAFiber GetTempPathW FindNextFileW CreateMutexW MultiByteToWideChar SetFileAttributesW GetLastError SetUnhandledExceptionFilter

oleaut32

SafeArrayPutElement SafeArrayCreateVector SetErrorInfo VariantClear GetErrorInfo SysFreeString SysStringLen SysAllocStringLen

user32

ScreenToClient TrackMouseEvent GetKeyboardState SetCapture MonitorFromRect GetMenu GetClipCursor ReleaseCapture EmptyClipboard OpenClipboard CloseClipboard SetClipboardData ClipCursor ShowCursor RegisterWindowMessageA DestroyCursor DrawTextW GetWindowDC OffsetRect MapWindowPoints GetMenuBarInfo GetClipboardData FillRect GetMenuItemInfoW GetActiveWindow SystemParametersInfoA IsProcessDPIAware GetTouchInputInfo CloseTouchInputHandle ShowWindow PostQuitMessage CheckMenuItem RegisterTouchWindow SetMenu GetKeyState RemoveMenu CreateAcceleratorTableW DestroyAcceleratorTable DrawIconEx GetAsyncKeyState SetMenuItemInfoW CreateMenu CreateIcon VkKeyScanW MessageBoxW TrackPopupMenu GetCursorPos AppendMenuW CreateIconIndirect MapVirtualKeyExW RegisterWindowMessageW RegisterClassW DestroyMenu CreatePopupMenu SetWindowDisplayAffinity EnumDisplaySettingsExW SetForegroundWindow SendInput MapVirtualKeyW GetForegroundWindow GetCaretBlinkTime SystemParametersInfoForDpi SetWindowTextW GetWindowRect DrawMenuBar SendMessageW IsIconic IsWindowVisible GetSysColor RedrawWindow GetWindowLongPtrW DispatchMessageW TranslateMessage GetClientRect RegisterRawInputDevices GetSystemMetrics MonitorFromWindow InvalidateRgn SetWindowPos SetWindowPlacement MsgWaitForMultipleObjectsEx PeekMessageW ChangeDisplaySettingsExW GetMonitorInfoW ReleaseDC PostMessageW SetCursor LoadCursorW DestroyWindow CreateWindowExW RegisterClassExW GetClassInfoExW GetClassNameW GetWindowPlacement GetDC RemovePropW ClientToScreen GetKeyboardLayout GetSystemMenu EnableMenuItem DefWindowProcW SetWindowLongW CallWindowProcW GetRawInputData GetWindowLongW AdjustWindowRectEx DestroyIcon SetWindowLongPtrW SetPropW GetPropW ValidateRect ToUnicodeEx InsertMenuW

uiautomationcore

UiaRaiseAutomationEvent UiaRaiseAutomationPropertyChangedEvent UiaReturnRawElementProvider UiaHostProviderFromHwnd UiaGetReservedMixedAttributeValue UiaGetReservedNotSupportedValue UiaLookupId

dwrite

DWriteCreateFactory

ole32

CoInitializeEx CoUninitialize OleInitialize CoCreateInstance RegisterDragDrop RevokeDragDrop

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetColorizationColor

shell32

DragQueryFileW Shell_NotifyIconW DragFinish

gdi32

SelectObject CreateCompatibleDC CreateSolidBrush DeleteDC CreateDIBSection CreateBitmap GetDeviceCaps CreateRectRgn SetPixelFormat SetBkMode SetTextColor ChoosePixelFormat DescribePixelFormat SwapBuffers DeleteObject

comctl32

RemoveWindowSubclass SetWindowSubclass DefSubclassProc

ntdll

RtlNtStatusToDosError NtWriteFile NtOpenFile NtCreateNamedPipeFile NtReadFile

shlwapi

AssocQueryStringW

combase

CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

CredWriteW ImpersonateAnonymousToken CredReadW RevertToSelf CredFree CredEnumerateW CredDeleteW

comdlg32

GetOpenFileNameW

uxtheme

SetWindowTheme

opengl32

wglGetProcAddress wglDeleteContext wglMakeCurrent wglCreateContext wglShareLists wglGetCurrentContext

imm32

ImmGetCompositionStringW ImmSetCandidateWindow ImmSetCompositionWindow ImmAssociateContextEx ImmGetContext ImmReleaseContext

vcruntime140

_CxxThrowException memmove __current_exception memcpy __CxxFrameHandler3 __current_exception_context memcmp memset __C_specific_handler

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _seh_filter_exe __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _crt_atexit __p___argc _initialize_onexit_table _register_onexit_function strerror _set_app_type

api-ms-win-crt-math-l1-1-0

acosf ceilf sinf cosf atan2f expf truncf roundf floorf round tanf exp2f powf __setusermatherr _hypotf cbrtf trunc log2 acos floor atan2 fmod cos fmodf sin tan pow ceil

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free