RecompLauncher_0[.]75[.]0-beta[.]14_x64-setup[.]exe

resource
RecompLauncher_0.75.0-beta.14_x64-setup.exe
unpack001/$PLUGINSDIR/System.dll

RecompLauncher_0.75.0-beta.14_x64-setup.exe

IMPHASH f4d1e4cd7416ef83f79f7c6a038875b3
SHA256 6890215d3a654ee26ed60ae7648152026e608b17bb9b4047c18f73aa7f949cbe
MD5 61738b73e7a7b88726e225cde422e412
SHA1 97c4c53afa0b4bec0bbe119780a77074dc935d66
SHA512 cbc4f8a788105b48a52bc7ebf3a222ebc6c3291ad062136c430454cb8c928f6290428afda8ceda2445b621c823a6b26d032ed91b80b9f8c0b43c41b670ee825e
SSDEEP 196608:2g56X5eHpDiavbNQcfpy+/bYzxpx8/CFF+/j9Qa:95GUDQEyjVpx8/CLoP
TLSH
T1997633D9EB108DF7DB3A4EF2A4D3DB07980D1D79A4524152880137A2AE794E4BB3D237
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree IIDFromString OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW

Name

.text

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

IMPHASH b844086d4b3e59aa7b4439d88bcb40cb
SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
MD5 81e34f1c4b04a15dbce200c52f598f67
SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
TLSH
T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

196B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/rl-done.bmp

SHA256 face458cc88eb81f744a76dda4b09d49605b3bb10d2cb44b28b2b174385d8f9e
MD5 c56abb20c38c1cd664b9ff15b1907d9d
SHA1 ea56081907c554b95d167723da8213be421c0c73
SHA512 9242a51a8ba86be523fc59eee5a55843e7b44c9908c34832e7a400571659dd5f85089a110455b9dcc65fc49f3cf1477bcd95382a6e7dc4d2c2b495347adb8f23
SSDEEP 1536:Kl/LjtAEwrUq2kKiShHSXkgJjCfKhbqFbu+bVpQGJHMGaRkFmWp1T+j:4DBAEwrUq2kKiF
TLSH
T19C251FA06FAE8021F1BAA9EDF4B1F4D332475783D6C2950FD7B5B0D4A3C46854A0DB4A
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/rl-progress.bmp

SHA256 e3d5d1b6e692b2f285dbe8baa3aa4d0ccae1ac4dbf25ca67a0b8cb7a06fef2d3
MD5 319642f07220ffe7a243a5d930353c84
SHA1 5251704cb85022df6abcd8bdbb441a0da8c4d974
SHA512 0977d0751de602abe3828ce3c7a63ea6c59c4cf4e4158533de456a5b5a84c8afa1bec2d44cdccc14a7fd29587f3eff6f8368406a733ed741bd9c39f16051c15c
SSDEEP 1536:RdlXEfkTq5BXNjCfKhbqFbu+6904/bAxGaRkFmWp1T+j:HlhTd
TLSH
T115258FD12FED8062F6B6A9BCC1B1F4D352879780CAD2950F95F5B0D4F7C46844A0EB8A
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/rl-repair.bmp

SHA256 77fecc42e618fb9747164cba98451e007397a2597d8d56d8d8728fd41e8709c1
MD5 e1ef0919d7d47fc4249212996728dac8
SHA1 dc5d71b436dfe30e668042b9f71abcc4bec2142e
SHA512 bffa644a29d58e6e3c5ef0447c81f69ca8a390fa9830b13be5da8ac5cb6249eadb336bdd51d9fd28f6a45b446956eae02db25807c13952426ca500fd7912a450
SSDEEP 1536:mUjjxH2Gw8kCng4kijcD738RAhHSXkgJjCfKhbqFbu+bVpQGJHMGaRkFmWp1T+j:molH2Gw8pnrcD7sB
TLSH
T1E82500A16FED8021F1BAA9E9F071F4D332875B83CAC2950FD6F5B0D4A7D46844A0D789
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/rl-update.bmp

SHA256 9f9a488a01505c2da47ad462c451efafde63415343070e64a61a4fbaca719a33
MD5 92ad619bb29012a614cee72625bb4fdb
SHA1 d55ee0e8a6cc219a4c0c6bdb3569355439f9fc81
SHA512 e223d5ca1aabf9946b8bda5d9802c5a1156cd340b572eb31114c5c6b699dbc83d5212c95b9497d1d1dc44bdf0bfe74df2490caa07e495d53bb8764a810ab86b2
SSDEEP 1536:5io6ZfZAyZvqJ0Z/olD0T1Bm1iCBDnk38RAhHSXkgJjCfKhbqFbu+bVpQGJHMGaj:5ivxvy0/O4/WtBDnksB
TLSH
T18A25F0A16FED8021F1BAA9E9F071F4D332875B83CAC2950FD6F5B0D4A7D46844A0D789
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/rl-welcome.bmp

SHA256 a43bf7724867114f179c44d60c7dc23d2f86decb04d0d89dd3ba460f30024c6a
MD5 f7a921b44b335656374aabd2f56f5b94
SHA1 136c485c971ec829a288768547a5938affcc4e08
SHA512 e9fe2ceb22e2312ffec09408b3b4af4f76c25b0755c0245e257faa79f3a54e7da528192f70f0f25799f93019f608a760647797f10bdb8040453ec4214b9d1535
SSDEEP 1536:sRQrMQD38RAhHSXkgJjCfKhbqFbu+bVpQGJHMGaRkFmWp1T+j:FDsB
TLSH
T11825FFA16FED8021F1BAA9E9F071F4D332475B83CAC2950FD6F5B0D4A7D46844A0D789
MD5 SHA1 SHA512 SSDEEP TLSH

RecompLauncher_0.75.0-beta.14_x64-setup.exe

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/System.dll

kernel32

msvcrt

ole32

user32

generic

$PLUGINSDIR/rl-done.bmp

$PLUGINSDIR/rl-progress.bmp

$PLUGINSDIR/rl-repair.bmp

$PLUGINSDIR/rl-update.bmp

$PLUGINSDIR/rl-welcome.bmp

Sharing

General

Malware Config

Signatures

File Explorer

RecompLauncher_0.75.0-beta.14_x64-setup.exe

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/System.dll

kernel32

msvcrt

ole32

user32

generic

$PLUGINSDIR/rl-done.bmp

$PLUGINSDIR/rl-progress.bmp

$PLUGINSDIR/rl-repair.bmp

$PLUGINSDIR/rl-update.bmp

$PLUGINSDIR/rl-welcome.bmp