Static task
static1
Behavioral task
behavioral1
Sample
manual_inject.exe
Resource
macos-20220504-en
General
-
Target
manual_inject.exe
-
Size
183KB
-
MD5
ae6292bb2e8a7ea243b9faab9d7a5008
-
SHA1
d8a67051b020474064a97d0e9324cdab6b25f9ad
-
SHA256
ae72d2245721d285e36d06a91b7f140f30405c40c566350d19b30e928cb4205c
-
SHA512
b6fae3e27c072a4a44fa90b4fdbe2675cc394b060117ff3242933d42c1dc6930a066f605290fe3f1473bd2b608285a65b27489f8d58980615e5ba7ede574d1e7
-
SSDEEP
3072:/ejPrBOTt3CN+2WtMWe1HxdsRNLg3sDeubsfVITKUdpVSKVuiH:B2yMfHARNE3uxQVN
Malware Config
Signatures
Files
-
manual_inject.exe.exe windows x64
4119e5b83811402ff5b8c83a905cfd0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
RtlPcToFileHeader
RtlCaptureContext
kernel32
WriteConsoleW
WriteProcessMemory
Sleep
GetLastError
LoadLibraryA
CloseHandle
GetProcAddress
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
GetExitCodeProcess
Process32First
SetConsoleTitleA
WriteFile
TerminateProcess
WaitForSingleObject
GetCurrentDirectoryA
OpenProcess
CreateToolhelp32Snapshot
GetFileAttributesA
QueryFullProcessImageNameA
CreateFileA
DeleteFileA
Process32Next
LocalFree
CreateProcessA
FormatMessageA
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
CreateProcessW
GetFileAttributesExW
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetEndOfFile
user32
SendMessageA
GetAsyncKeyState
FindWindowA
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ