GrandV-Launcher-windows-x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
GrandV-Launcher-windows-x64.exe
Size 12.5MB
Sample261017-lwd15sdw21
SHA256 5e9707399af5bb25ce2f164913a50d59c2f70004a01502e8fe7ff355b1054b7a
MD5 ba2926a5dc5d10dab254b6e89265e3b7
SHA1 384af0cec7be10d60365f7af4c781ba25142df6e
SHA512 dfc101af7be1bdad06151c3b2002e06560c6a81cece12f1c59342c56adcf845251f91531c1a4b76f41322e57ba8eb7e5bf543d1b8a5b546f6a4455c39ded0f17
SSDEEP 98304:LgZpecIvmhgi8FSuWpmZQdd0Uyb49PLWx3bZJGFYfGFYVF+61Sp7t:Fk8gMo0UoSPL6JcYcmF
TLSH
T12DD66B127A5B99ADC15AC470934686736E2270CB0B35B9FF45C496383EBAAF05F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GrandV-Launcher-windows-x64.exe

File Explorer

GrandV-Launcher-windows-x64.exe

.exe 12.5MB

GrandV-Launcher-windows-x64.exe

IMPHASH 938f7ec79d890c084ad007fce8553edd
SHA256 5e9707399af5bb25ce2f164913a50d59c2f70004a01502e8fe7ff355b1054b7a
MD5 ba2926a5dc5d10dab254b6e89265e3b7
SHA1 384af0cec7be10d60365f7af4c781ba25142df6e
SHA512 dfc101af7be1bdad06151c3b2002e06560c6a81cece12f1c59342c56adcf845251f91531c1a4b76f41322e57ba8eb7e5bf543d1b8a5b546f6a4455c39ded0f17
SSDEEP 98304:LgZpecIvmhgi8FSuWpmZQdd0Uyb49PLWx3bZJGFYfGFYVF+61Sp7t:Fk8gMo0UoSPL6JcYcmF
TLSH
T12DD66B127A5B99ADC15AC470934686736E2270CB0B35B9FF45C496383EBAAF05F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6710768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gta_browser_launcher.pdb

bcryptprimitives

ProcessPrng

kernel32

SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent GetCommandLineA DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx SetUnhandledExceptionFilter GetSystemTimePreciseAsFileTime FindClose FlushFileBuffers PostQueuedCompletionStatus TerminateProcess SetStdHandle AttachConsole IsProcessorFeaturePresent WriteFile FlsGetValue GetStartupInfoW GetSystemTimeAsFileTime CreateIoCompletionPort GetQueuedCompletionStatusEx GetStringTypeW FreeLibrary InitializeSListHead SwitchToThread GetModuleFileNameW SetFileCompletionNotificationModes Sleep SetConsoleTextAttribute CompareStringW LCMapStringW GetModuleHandleExW SleepEx GlobalFree WriteFileEx QueryPerformanceFrequency WaitForSingleObject CloseHandle SetConsoleMode GetModuleHandleW GetCurrentProcess DuplicateHandle CreateThread SetThreadErrorMode GetEnvironmentVariableW SetHandleInformation LoadLibraryA lstrlenW GetCommandLineW CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetExitCodeProcess CreateDirectoryW SetFilePointerEx SetThreadStackGuarantee MoveFileExW FindFirstFileExW ExitProcess GetSystemInfo WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex GetFinalPathNameByHandleW DeleteFileW WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer GetFileAttributesW FlsFree FlsAlloc IsThreadAFiber FlsSetValue GetFileType GetCurrentDirectoryW AddVectoredExceptionHandler FreeEnvironmentStringsW FindNextFileW SetFileAttributesW SetConsoleCtrlHandler RegisterWaitForSingleObject UnregisterWaitEx GetEnvironmentStringsW RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext QueryPerformanceCounter CompareStringOrdinal HeapAlloc LoadLibraryW HeapSize GetStdHandle GetCurrentThread GetProcAddress GetLastError FormatMessageW VirtualProtect SetLastError GetCurrentThreadId LoadLibraryExW WideCharToMultiByte GlobalSize GetConsoleScreenBufferInfo GlobalUnlock GlobalLock GlobalAlloc MultiByteToWideChar HeapReAlloc HeapFree GetProcessHeap GetModuleHandleA GetFullPathNameW GetConsoleMode ReadFileEx

advapi32

RevertToSelf SystemFunction036 ImpersonateAnonymousToken

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

user32

EnumDisplayMonitors MonitorFromPoint GetMonitorInfoW RedrawWindow InvalidateRgn ClientToScreen MonitorFromWindow ChangeDisplaySettingsExW DestroyIcon GetKeyboardLayout ToUnicodeEx RegisterWindowMessageA SetWindowDisplayAffinity GetWindowTextW GetDC GetWindowTextLengthW GetClassInfoExW RegisterClassExW GetCursorPos TrackMouseEvent GetClipboardData IsProcessDPIAware SetClipboardData SetCapture ReleaseCapture GetMenu GetRawInputData GetKeyState GetAsyncKeyState GetKeyboardState DestroyCursor RegisterClipboardFormatW SystemParametersInfoA EmptyClipboard GetClientRect IsIconic CreateIcon DestroyWindow MsgWaitForMultipleObjectsEx PeekMessageW GetClipCursor ValidateRect ClipCursor ScreenToClient MonitorFromRect GetTouchInputInfo CloseTouchInputHandle RegisterTouchWindow ShowCursor CloseClipboard IsClipboardFormatAvailable OpenClipboard ShowWindow GetSystemMenu TranslateMessage EnableMenuItem DispatchMessageW SetWindowLongPtrW RegisterRawInputDevices SetWindowLongW GetActiveWindow GetSystemMetrics SendMessageW MapVirtualKeyExW CreateIconFromResourceEx GetWindowLongW ReleaseDC PostMessageW GetWindowLongPtrW SetWindowPos GetWindowRect AdjustWindowRectEx SetWindowTextW SetCursorPos GetForegroundWindow MapVirtualKeyW CreateWindowExW DefWindowProcW GetClassNameW SetWindowPlacement GetWindowPlacement FlashWindowEx SetCursor LoadCursorW SetForegroundWindow SendInput

ws2_32

shutdown sendto WSASocketW ioctlsocket setsockopt WSAIoctl bind listen recv WSASend send WSAGetLastError getaddrinfo getsockname accept WSAStartup freeaddrinfo closesocket recvfrom

shell32

SHCreateItemFromParsingName DragFinish ShellExecuteW DragQueryFileW

ntdll

NtOpenFile NtCancelIoFileEx RtlNtStatusToDosError NtReadFile NtWriteFile NtCreateNamedPipeFile NtDeviceIoControlFile NtCreateFile

ole32

CoInitializeEx CoUninitialize CoCreateInstance RevokeDragDrop OleInitialize RegisterDragDrop

combase

CoTaskMemFree

shlwapi

AssocQueryStringW

gdi32

SwapBuffers CreateRectRgn DescribePixelFormat ChoosePixelFormat SetPixelFormat GetDeviceCaps DeleteObject

opengl32

wglGetCurrentContext wglDeleteContext wglCreateContext wglShareLists wglGetCurrentDC wglMakeCurrent wglGetProcAddress

imm32

ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetCompositionStringW ImmReleaseContext ImmAssociateContextEx

bcrypt

BCryptGenRandom

iphlpapi

GetAdaptersAddresses

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

uxtheme

SetWindowTheme

Name

.text

Size

6.7MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

282KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

160KB

Virtual Size

159KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

GrandV-Launcher-windows-x64.exe

bcryptprimitives

kernel32

advapi32

api-ms-win-core-synch-l1-2-0

user32

ws2_32

shell32

ntdll

ole32

combase

shlwapi

gdi32

opengl32

imm32

bcrypt

iphlpapi

dwmapi

uxtheme

generic