Launcher.rar
- SHA256 9de6fd710d94b4666b8065bcc12dc6bb9748844a3abdcd6f751cd455804ac54d
Static task
static1
1 signatures
General
- Target Launcher.rar
- Size 209KB
- Sample261113-p5dnhsbz9p
- SHA256 9de6fd710d94b4666b8065bcc12dc6bb9748844a3abdcd6f751cd455804ac54d
- MD5 b1881bedbc32011e55b4d97984ab0516
- SHA1 fd0b0f5cda6ffcbec391004766c5f7e387ddb609
- SHA512 3b42fe5747b0e47e46964d4c82b59ed727f69d2d0cda1bbe856c491b0047bbb53e5285f50fc34f1283b6b7065241e202f81b4999172054b46935c28456f2a3c7
- SSDEEP 3072:/2/+axXhCziFFtd/tvwb2oxWPkrT073dPUIabvRVZK5O75QxUYSJIvsLY:/2JZhM0DdKdxMkchUtVZUO75QxglLY
- TLSH T15224236FDD8F0AD71987797A343F8789B125A4BD073A9E215212371318E6C93A1BCD0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Launcher.exe
File Explorer
-
Launcher.rar.rar 209KB
-
Launcher.exe.exe 1.1MB
Launcher.exe
- IMPHASH 73f461c771aef77ec43d53a0c54f0c8d
- SHA256 f3e3495b772b747545c33cd6d1d0108c1fd946c2cf68e56bc048766ea91635c0
- MD5 def233afb28f8a78ff7fd69b29e518ab
- SHA1 bdcd0af478a14d629faa85f59ca021ba05613d7b
- SHA512 4d86e4a0d40c4535c8338983b4c3975867871c43855c38c392fcd32c1f6891173b102a223c8d6758fea6a3479163aa20bbb61a3d5cce7a11d4bebf4044eca521
- SSDEEP 12288:ebs/m0E54jwaFXGc8lEBBBHGBKq2IZwDqvfqItNqdg:ebOVE5ifGPRZwWvf3fd
- TLSH T120357C83E7A385D8C116D9B5534BF137F9627C8E4B153197ABC41E633A67BA4E22CB00
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ntdll
NtClose
NtCreateFile
NtDeviceIoControlFile
NtLockFile
NtQueryObject
NtSetInformationFile
RtlEqualUnicodeString
RtlExitUserProcess
RtlGetFullPathName_U
RtlWaitOnAddress
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateProcessW
ExitProcess
GetCurrentThreadId
GetDiskFreeSpaceExW
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount64
GlobalMemoryStatusEx
MoveFileW
MultiByteToWideChar
ReadFile
ReleaseSRWLockExclusive
SetEnvironmentVariableA
SetFilePointerEx
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteFile
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
SystemFunction036
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertOpenSystemStoreW
ws2_32
WSAGetLastError
WSASocketW
WSAStartup
closesocket
connect
freeaddrinfo
getaddrinfo
Name
.text
Size
469KB
Virtual Size
468KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
625KB
Virtual Size
625KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.CRT
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
700B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ