Launcher[.]exe | Triage™

Resubmissions

24/10/2026, 19:11

261024-xwcnvsfe96

24/10/2026, 19:05

261024-xrzb3aby3x3

Sharing

Copy URL Twitter E-mail

General

Target
Launcher.exe
Size 1.4MB
Sample261024-xwcnvsfe96
SHA256 e6042ff10a59173c98e8949d4d768e5f59b9c95891f03abe10908d5704695d20
MD5 d37c1bb957d2209d5f42d0698ae4abfe
SHA1 8dd200b1df6f0288b71f8b864016a0a95f3a91d9
SHA512 f084a0f916e02ebb6e99d8c1eb92dcc640d45b0ab9aaf3e6ade159fd4f39989cea1133a6993ef5f2dbc7d6c8beb59123ca2079f21a37613404fa08b71d5444b3
SSDEEP 24576:+s0bO/FqysqygNENUvqygNUvqygNUvqygNUvqygNUvqygNLx:+sl/LektNtNtNtNt+x
TLSH
T17565D081A2C47451D2E975398674897691377BBA0ABEC40E6A8FF14CFF93BC3D420798
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Launcher.exe

File Explorer

Launcher.exe

.exe 1.4MB

Launcher.exe

IMPHASH af678f65e622699d93b27b5a62a15383
SHA256 e6042ff10a59173c98e8949d4d768e5f59b9c95891f03abe10908d5704695d20
MD5 d37c1bb957d2209d5f42d0698ae4abfe
SHA1 8dd200b1df6f0288b71f8b864016a0a95f3a91d9
SHA512 f084a0f916e02ebb6e99d8c1eb92dcc640d45b0ab9aaf3e6ade159fd4f39989cea1133a6993ef5f2dbc7d6c8beb59123ca2079f21a37613404fa08b71d5444b3
SSDEEP 24576:+s0bO/FqysqygNENUvqygNUvqygNUvqygNUvqygNUvqygNLx:+sl/LektNtNtNtNt+x
TLSH
T17565D081A2C47451D2E975398674897691377BBA0ABEC40E6A8FF14CFF93BC3D420798
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

cc:b6:db:be:ed:b4:63:a9:59:3b:23:e0:d6:3c:b0:45:85:83:21:55

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Activision Publishing,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Activision Publishing,L=Santa Monica,ST=California,C=US

Chains

Oct 21, 2010

CN=Activision Publishing,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Activision Publishing,L=Santa Monica,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Activision Publishing,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Activision Publishing,L=Santa Monica,ST=California,C=US

Serial Number

1a:ce:03:06:90:fb:28:43:79:67:82:32:8b:85:b8:84

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Mar 5, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

Major OS version

Entry point

19513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

y:\Goliath\Engine\Build\Win\Launcher\Release\Launcher.pdb

kernel32

GetSystemDirectoryW FreeLibrary GetProcAddress LoadLibraryW GlobalMemoryStatusEx HeapFree HeapAlloc GetProcessHeap GetDiskFreeSpaceExA FindFirstFileW GetSystemDirectoryA CloseHandle CreateFileA CompareStringW CompareStringA SetEndOfFile WriteConsoleW GetConsoleOutputCP FindClose GetModuleFileNameW SetCurrentDirectoryW GetCommandLineA LoadLibraryA CreateProcessA WriteConsoleA GetTimeZoneInformation GetLocaleInfoA GetLastError WideCharToMultiByte GetModuleHandleW Sleep ExitProcess GetDriveTypeA GetFullPathNameA FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection RtlUnwind MultiByteToWideChar ReadFile RaiseException SetFilePointer GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetModuleHandleA GetCurrentDirectoryA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEnvironmentVariableA

user32

GetSystemMetrics MessageBoxW wsprintfW LoadStringA

advapi32

RegSetValueExA RegOpenKeyA RegQueryValueExA RegCloseKey RegCreateKeyA

ole32

CoUninitialize CoCreateInstance CoInitializeEx

oleaut32

SysAllocString

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Launcher.exe

PE Signature issue

kernel32

user32

advapi32

ole32

oleaut32

generic