Launcher[.]exe | Triage™

General

Target
Launcher.exe
Size 98KB
Sample261002-xwtmdawfqe
SHA256 6d76785ff9806540c469c3b466eeacacb5d129d38723d53936a90b419f22a5a0
MD5 2a64f1e0fbb0e0687bd41dedf3ab19e8
SHA1 5601fd7b42835ba56fb13e0fe1915964ab0a42e4
SHA512 999b836c5bf03851bbbafb08baa32aa6f27db736b38093eff2895cabd5af7e8462eb97a06d0560dc28df9011bfb089884ab1d3eaf496d9963e58ada5fa04de8a
SSDEEP 3072:ku1hlvOR3R2gFL4pTGt4/NBOtJwgOeYg4fFcIqeBsmSxsyLZ:Ch2Uly/Tg7cSxHLZ
TLSH
T127A35A4175C1C472D4B22A351874DAB14A3EFE301E609FAF2398067E9F746C19A36E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Launcher.exe

File Explorer

Launcher.exe

.exe 98KB

Launcher.exe

IMPHASH 5a6e533a847e4a6c14333c31892a86eb
SHA256 6d76785ff9806540c469c3b466eeacacb5d129d38723d53936a90b419f22a5a0
MD5 2a64f1e0fbb0e0687bd41dedf3ab19e8
SHA1 5601fd7b42835ba56fb13e0fe1915964ab0a42e4
SHA512 999b836c5bf03851bbbafb08baa32aa6f27db736b38093eff2895cabd5af7e8462eb97a06d0560dc28df9011bfb089884ab1d3eaf496d9963e58ada5fa04de8a
SSDEEP 3072:ku1hlvOR3R2gFL4pTGt4/NBOtJwgOeYg4fFcIqeBsmSxsyLZ:Ch2Uly/Tg7cSxHLZ
TLSH
T127A35A4175C1C472D4B22A351874DAB14A3EFE301E609FAF2398067E9F746C19A36E7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExA RegSetValueExW RegCloseKey

user32

MessageBoxA

kernel32

WriteConsoleW CreateFileW SetEnvironmentVariableW GetFileAttributesW GetFullPathNameW CloseHandle WaitForSingleObject GetCurrentProcessId TerminateProcess ResumeThread CreateProcessW GetModuleFileNameW GetModuleHandleW lstrcpyW lstrlenA lstrlenW GetPrivateProfileStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW GetProcessHeap SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode DecodePointer RaiseException

Sharing