Battly-Launcher-Windows[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Battly-Launcher-Windows.exe
Size 17.2MB
Sample261024-dvm9eseb55
SHA256 0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa
MD5 dc1c0cf4c0e8d8fd4b9119d9b3fc0796
SHA1 cb5f25073002b224bb62039dab668f14e4aca8ea
SHA512 5ae5bb6b7150edb190d866a46bee97deb99c0ccaf1a58939d15c5ad643a2efbdecf3610f0b800f1d9775bc64061d337af9697c06950f0521c3634e9b93d4f3e7
SSDEEP 196608:8irZn74T6LTwKcKngnckbRjVCPEEKnCMu6eawO80Qv5jC0J:887DLTwKcKnRe9QKna6uTT5jC+
TLSH
T17B077C227B9A99ADC05AC47083864B725E3174CB0B35BAFF448496782F6DAF41F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Battly-Launcher-Windows.exe

.exe 17.2MB

Battly-Launcher-Windows.exe

IMPHASH 6bbad0ac72e05c47c1d7b8e1b4147b4a
SHA256 0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa
MD5 dc1c0cf4c0e8d8fd4b9119d9b3fc0796
SHA1 cb5f25073002b224bb62039dab668f14e4aca8ea
SHA512 5ae5bb6b7150edb190d866a46bee97deb99c0ccaf1a58939d15c5ad643a2efbdecf3610f0b800f1d9775bc64061d337af9697c06950f0521c3634e9b93d4f3e7
SSDEEP 196608:8irZn74T6LTwKcKngnckbRjVCPEEKnCMu6eawO80Qv5jC0J:887DLTwKcKnRe9QKna6uTT5jC+
TLSH
T17B077C227B9A99ADC05AC47083864B725E3174CB0B35BAFF448496782F6DAF41F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Password

infected

Digest

a6:5e:87:cf:21:1c:3f:c4:26:c3:d5:d3:05:ea:83:9c:5f:11:ed:0e:be:e8:fb:8d:b4:7e:17:c8:15:63:db:99

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TECNO BROS STUDIOS\, S.L.,O=TECNO BROS STUDIOS\, S.L.,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 25, 2026

CN=TECNO BROS STUDIOS\, S.L.,O=TECNO BROS STUDIOS\, S.L.,L=Barcelona,ST=Barcelona,C=ES

CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=TECNO BROS STUDIOS\, S.L.,O=TECNO BROS STUDIOS\, S.L.,L=Barcelona,ST=Barcelona,C=ES

Serial Number

33:00:08:01:c0:3c:b4:b2:fd:10:b7:90:96:00:00:00:08:01:c0

Issuer

CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 25, 2026 - Feb 28, 2026

Subject

CN=Microsoft ID Verified CS AOC CA 01,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:37:8c:5b:a1:d9:5b:8c:d4:00:00:00:00:00:07

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2021 - Apr 13, 2026

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:7A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:5b:4a:b5:8d:41:32:6d:dc:74:00:00:00:00:00:5b

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 8, 2026 - Jan 7, 2027

Minor OS version

Major OS version

Entry point

7267504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

battly_installer.pdb

ntdll

RtlNtStatusToDosError NtDeviceIoControlFile NtCreateFile NtCancelIoFileEx RtlGetVersion NtQueryInformationProcess NtQuerySystemInformation RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind NtReadFile NtOpenFile NtWriteFile

advapi32

SystemFunction036 EventUnregister EventWriteTransfer EventSetInformation RegGetValueW RegCloseKey LookupAccountSidW EventRegister CopySid GetLengthSid IsValidSid GetTokenInformation OpenProcessToken RegSetValueExW RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegDeleteTreeW

kernel32

GetCurrentProcessId CreateFileW GetDiskFreeSpaceExW GetLogicalDrives VirtualQueryEx GetExitCodeProcess GetProcessIoCounters GetSystemTimes GetProcessTimes OpenProcess GetCurrentProcess GetCurrentThreadId GetModuleHandleW Sleep GetModuleHandleA FormatMessageW GetSystemTimeAsFileTime HeapFree HeapAlloc GetProcessHeap IsProcessorFeaturePresent ReleaseSRWLockExclusive FreeLibrary LoadLibraryExA AcquireSRWLockExclusive GetVolumeInformationW GetDriveTypeW GetProcAddress DeviceIoControl LoadLibraryA CreateMutexA SetHandleInformation WaitForSingleObjectEx GetTempPathW CreateThread WideCharToMultiByte WriteConsoleW MultiByteToWideChar UpdateProcThreadAttribute InitializeProcThreadAttributeList CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFullPathNameW WaitForMultipleObjects ReadFileEx CreateNamedPipeW ExitProcess DuplicateHandle SetEnvironmentVariableW CreateIoCompletionPort GetQueuedCompletionStatusEx CancelIo CreateEventW PostQueuedCompletionStatus ReadFile GetOverlappedResult CopyFileExW SetFileCompletionNotificationModes GetFileInformationByHandle GetConsoleMode WakeAllConditionVariable GetFinalPathNameByHandleW SleepConditionVariableSRW GetNativeSystemInfo GetSystemInfo RemoveDirectoryW MoveFileExW DeleteFileW FindFirstFileW CreateDirectoryW GetFileInformationByHandleEx FindClose FindNextFileW ReleaseMutex HeapReAlloc GetSystemTimePreciseAsFileTime QueryPerformanceFrequency GetProcessId TerminateProcess WaitForSingleObject IsDebuggerPresent LoadLibraryW SleepEx WriteFileEx UnhandledExceptionFilter GetStdHandle SetUnhandledExceptionFilter SetFilePointerEx SetFileInformationByHandle GetCommandLineW GetEnvironmentStringsW GetCurrentDirectoryW SetLastError QueryPerformanceCounter SetWaitableTimer CreateWaitableTimerExW SwitchToThread GetCurrentThread SetThreadStackGuarantee lstrlenW AddVectoredExceptionHandler ReadProcessMemory CompareStringOrdinal DeleteProcThreadAttributeList FreeEnvironmentStringsW GetEnvironmentVariableW GlobalMemoryStatusEx GetTickCount64 LocalFree OutputDebugStringW OutputDebugStringA GlobalLock GlobalUnlock GlobalAlloc GetFileAttributesW GetLastError CloseHandle GetModuleFileNameW LoadLibraryExW LCIDToLocaleName GetUserDefaultUILanguage InitializeSListHead GetUserDefaultLocaleName CreatePipe

oleaut32

GetErrorInfo SysStringLen SetErrorInfo VariantClear SysFreeString SysAllocString

ole32

CoUninitialize CoInitializeSecurity CoTaskMemFree CoIncrementMTAUsage CoInitializeEx CoTaskMemAlloc RegisterDragDrop OleInitialize CoSetProxyBlanket CoCreateInstance CreateStreamOnHGlobal RevokeDragDrop

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

user32

GetAsyncKeyState GetActiveWindow RedrawWindow GetRawInputData GetKeyState MonitorFromPoint EnumDisplayMonitors SendInput SetMenuItemInfoW UnregisterHotKey RegisterClipboardFormatW ClientToScreen MapVirtualKeyExW SetCapture VkKeyScanW OpenClipboard RegisterRawInputDevices GetClipboardData RegisterClassExW SetClipboardData CloseClipboard GetClientRect PostMessageW SetMenu IsIconic GetCursorPos SetWindowPos SetCursorPos CreateWindowExW IsWindow InvalidateRgn GetSystemMetrics ScreenToClient DestroyWindow GetMessageW GetAncestor DispatchMessageW TranslateAcceleratorW TranslateMessage EmptyClipboard PostThreadMessageW ReleaseCapture MonitorFromRect RegisterTouchWindow DefWindowProcW GetKeyboardLayout FlashWindowEx PeekMessageW SetWindowPlacement TrackMouseEvent GetTouchInputInfo RegisterHotKey CloseTouchInputHandle MonitorFromWindow GetMonitorInfoW ValidateRect GetUpdateRect ToUnicodeEx MapVirtualKeyW GetWindowPlacement GetKeyboardState DispatchMessageA GetMessageA IsProcessDPIAware DestroyAcceleratorTable CreateAcceleratorTableW SetForegroundWindow GetWindowTextW GetWindowTextLengthW SetWindowTextW CreateIcon SystemParametersInfoA IsWindowVisible AdjustWindowRectEx GetWindowRect DestroyIcon PostQuitMessage AppendMenuW CreateMenu CheckMenuItem GetWindowLongPtrW SetWindowDisplayAffinity GetMenu ShowCursor ClipCursor GetClipCursor EnableMenuItem GetSystemMenu ShowWindow SetWindowLongW SendMessageW SetWindowLongPtrW MsgWaitForMultipleObjectsEx RegisterWindowMessageA EnumChildWindows ChangeDisplaySettingsExW GetDC GetForegroundWindow GetWindowLongW SetCursor LoadCursorW

secur32

ApplyControlToken AcceptSecurityContext InitializeSecurityContextW FreeContextBuffer DeleteSecurityContext QueryContextAttributesW AcquireCredentialsHandleA FreeCredentialsHandle LsaGetLogonSessionData DecryptMessage LsaFreeReturnBuffer LsaEnumerateLogonSessions EncryptMessage

bcrypt

BCryptGenRandom

ws2_32

connect getsockname getpeername getsockopt shutdown recv bind send WSASend setsockopt WSAIoctl WSAGetLastError WSASocketW getaddrinfo freeaddrinfo closesocket WSACleanup WSAStartup ioctlsocket

crypt32

CertDuplicateCertificateContext CertDuplicateCertificateChain CertFreeCertificateChain CertDuplicateStore CertFreeCertificateContext CertCloseStore CertOpenStore CertAddCertificateContextToStore CertVerifyCertificateChainPolicy CertEnumCertificatesInStore CertGetCertificateChain

gdi32

GetDeviceCaps DeleteObject CreateRectRgn

dwmapi

DwmEnableBlurBehindWindow

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

shell32

SHGetKnownFolderPath ShellExecuteW DragFinish SHCreateItemFromParsingName DragQueryFileW CommandLineToArgvW SHAppBarMessage

pdh

PdhGetFormattedCounterValue PdhRemoveCounter PdhOpenQueryA PdhAddEnglishCounterW PdhCollectQueryData PdhCloseQuery

powrprof

CallNtPowerInformation

iphlpapi

GetIfTable2 FreeMibTable GetAdaptersAddresses GetIfEntry2

netapi32

NetUserGetInfo NetUserEnum NetApiBufferFree NetUserGetLocalGroups

uxtheme

SetWindowTheme

psapi

GetPerformanceInfo GetModuleFileNameExW

vcruntime140

__std_exception_copy __std_exception_destroy _purecall wcsrchr __current_exception_context memset _CxxThrowException __current_exception memmove memcpy __C_specific_handler __CxxFrameHandler3 memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

__setusermatherr round floor pow trunc

api-ms-win-crt-string-l1-1-0

strlen wcslen _wcsicmp

api-ms-win-crt-heap-l1-1-0

malloc free realloc _set_new_mode _callnewh

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _seh_filter_exe _cexit _set_app_type _initialize_onexit_table __p___argc _c_exit terminate _exit _register_onexit_function _configure_narrow_argv _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment __p___argv _crt_atexit exit

api-ms-win-crt-convert-l1-1-0

wcstol _ultow_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

Battly-Launcher-Windows.exe

ntdll

advapi32

kernel32

oleaut32

ole32

api-ms-win-core-winrt-l1-1-0

bcryptprimitives

api-ms-win-core-synch-l1-2-0

user32

secur32

bcrypt

ws2_32

crypt32

gdi32

dwmapi

comctl32

shell32

pdh

powrprof

iphlpapi

netapi32

uxtheme

psapi

vcruntime140

vcruntime140_1

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic