SharpInjector[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
SharpInjector.zip
Size 14KB
Sample240416-saqw5scg86
SHA256 fce2c96d826f347d57fc2d1aebbb9a06b51a851e17f112c6c0a10f60e68df193
MD5 bc116098b7a4bf6972fe84ea5b075a0b
SHA1 050126425049ec113a1efa4212a0db91a2c176d9
SHA512 7c6be6cc007e3db330c9d114396ebe8bb08f2e6701c05c64faf3e3735841160109da71cd588120928456414f9888f37aa5f968491af2e2a4769c1467c7fdc1ab
SSDEEP 384:OOiwYULzamx7fFdyDyx7JZPKAn0lVSeDELS6TzWpyXkCph:COFxHyDyFWDXSHLPTShk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DACInjector.dll
unpack001/SharpInjector.exe

File Explorer

SharpInjector.zip

.zip 14KB
DACInjector.dll

.dll 22KB
SharpInjector.exe

.exe 8KB

SharpInjector.zip

SHA256 fce2c96d826f347d57fc2d1aebbb9a06b51a851e17f112c6c0a10f60e68df193
MD5 bc116098b7a4bf6972fe84ea5b075a0b
SHA1 050126425049ec113a1efa4212a0db91a2c176d9
SHA512 7c6be6cc007e3db330c9d114396ebe8bb08f2e6701c05c64faf3e3735841160109da71cd588120928456414f9888f37aa5f968491af2e2a4769c1467c7fdc1ab
SSDEEP 384:OOiwYULzamx7fFdyDyx7JZPKAn0lVSeDELS6TzWpyXkCph:COFxHyDyFWDXSHLPTShk
MD5 SHA1 SHA512 SSDEEP

DACInjector.dll

IMPHASH 29d8d23c1a29b9c2c374982012f37d67
SHA256 b5298e5d42170b08807f9e59c9bc921354123755ba35777db8933d85275e53c6
MD5 29dbdaec0e04db5f22a9f744599595f1
SHA1 9fc6f3e219365db87d4cfdb55b6d0161c1b31ad9
SHA512 c026ae6558c632a9f4740bcfbc2b5e791d6601eb25ce4ffd85d350e5eb0ac7a80604fc7014a5a865c1c2db26e593f91595a840b3a9468de917c8bd324dcabf36
SSDEEP 384:QmDLr6iR0vLleOD3NSyrSl4PVzlXjRlI7GJSlPAbmNlwibY:10v5eSfNdzTlI7GJSl4bciGY
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\Cyberhound\source\repos\DACInjector\release\DACInjector.pdb

kernel32

OpenProcess WriteProcessMemory GetFullPathNameA WaitForSingleObject GetModuleHandleA GetExitCodeThread GetProcAddress VirtualAllocEx CreateRemoteThread VirtualFreeEx SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter

user32

FindWindowA GetWindowThreadProcessId

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?_Xlength_error@std@@YAXPBD@Z ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

vcruntime140

_CxxThrowException __std_exception_copy __std_exception_destroy __CxxFrameHandler3 __std_type_info_destroy_list _except_handler4_common memcpy memset memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _execute_onexit_table _configure_narrow_argv _cexit _seh_filter_dll _invalid_parameter_noinfo_noreturn _initterm _initterm_e _initialize_narrow_environment _crt_atexit

api-ms-win-crt-stdio-l1-1-0

ungetc setvbuf fgetpos fwrite fsetpos fread fgetc fclose fflush fputc _get_stream_buffer_pointers _fseeki64

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

SharpInjector.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 ff8a79e2b7373be9037353251b57b8df4835c9ac8d9692d5782a63fb1595a84f
MD5 3409d79f364718e42649eaf8af4d2ee3
SHA1 05a4eb0ac15bc69c870121ca689963c73e6c0dfa
SHA512 c80ab1e083b5bcd660412700e06cf058739046a9338f231f0ff65c29474543f38c55b29cb9cfb5635bdec47b157b28e5c685b12cd7e68176463422d243fba373
SSDEEP 192:Y+lZuPa0vUylaYtEDOd1QDtXoC6YfWyRm1kCM:Y2uPTvxau8WN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.