mclauncher_0[.]2[.]2_windows_amd64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
mclauncher_0.2.2_windows_amd64.zip
Size 3.6MB
Sample261102-b82mvsdh52
SHA256 6c28bc72abf38d754b49ac2425934ebf5f2485dbe3393e62de737d63def5814d
MD5 0d61280cf6e3fecc0d6c9f528bdb21ff
SHA1 e4d17a46b922801a30f9833d809d12a4dea3b1cb
SHA512 a2e3ca8f20cc18816414fef82867bdaa82a27a0c895d981729ec6027d699dc885d52536586202fdcb422c539febc878206c122fcf9cf0df28fa0e266f420173a
SSDEEP 98304:uG1F7M0aLa5+vaiv4JmkAP1mK/cEIQPSLQQtPHLp4MgQJejge4o:uG11M0K/1vgmkAPYK/cEhPS5hdEio
TLSH
T1CC0633933F189C24F0FA38B24BFA131A015958F458B504AB68E9BDDD256EFCC7A16DC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mclauncher.exe

File Explorer

mclauncher_0.2.2_windows_amd64.zip

.zip 3.6MB
LICENSE

1KB
README.md

21KB
mclauncher.exe

.exe 9.0MB

mclauncher_0.2.2_windows_amd64.zip

SHA256 6c28bc72abf38d754b49ac2425934ebf5f2485dbe3393e62de737d63def5814d
MD5 0d61280cf6e3fecc0d6c9f528bdb21ff
SHA1 e4d17a46b922801a30f9833d809d12a4dea3b1cb
SHA512 a2e3ca8f20cc18816414fef82867bdaa82a27a0c895d981729ec6027d699dc885d52536586202fdcb422c539febc878206c122fcf9cf0df28fa0e266f420173a
SSDEEP 98304:uG1F7M0aLa5+vaiv4JmkAP1mK/cEIQPSLQQtPHLp4MgQJejge4o:uG11M0K/1vgmkAPYK/cEhPS5hdEio
TLSH
T1CC0633933F189C24F0FA38B24BFA131A015958F458B504AB68E9BDDD256EFCC7A16DC1
MD5 SHA1 SHA512 SSDEEP TLSH

mclauncher.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 87bc5566a3a9a10e76e6ecda710f7343cdf535db6909959c93039684f9f57e32
MD5 2b244b04284bdb44102c9ea655ea3792
SHA1 2df867cdea01a5e9d2b1c129d444fc172240c77a
SHA512 53800fc4cada948607f94e8a0535565e039049a67dc1804d058fa0284d35041570a9094d54008286968586e11e63af626b621988d407af7ea0c57189fdee8275
SSDEEP 49152:vo3R7m8dIvCBeU3426sr14sWpXJSvmFoLZ/U3B1tpobXbha3pZFqA0EWpJcxH+ti:vG646tpFolq1XS2/LW0Ohox3mahE
TLSH
T1E0965B07E89144E5C4AAE23486768262BF717C485B3177E72F90F7382F76BC06AB9750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

491616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

606KB

Virtual Size

963KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mclauncher_0.2.2_windows_amd64.zip

LICENSE

README.md

mclauncher.exe

kernel32

generic