AlisInjector(x64)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

AlisInjector(x64).exe
Size

373KB
MD5

b632f8ffc4243c626a0c5100ac1f2efe
SHA1

156143aa36efb7199c7857b042c5eccdeeeea0e2
SHA256

7569a0e2198640cacd8936519ed7e7fd27eab4bc3db3a033c04bc95c213bf40a
SHA512

69bf752a107f8062b56bcd553614d784b4f04f40758c68dd12e3552c1064954af6552692ddda796034d06082036847329bf3469ede8c33b8b19745ea8d039f18
SSDEEP

6144:xn5ThCIxu8Cmm+SKcdP1qL2o1rBnU+5W5DLt1Yx299R/+vbbyfBLLorCvE+hcLrq:xn5Th/trmNJPIaiBnU+5W5Dx1Jh/Gbbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AlisInjector(x64).exe

Files

AlisInjector(x64).exe
.exe windows:6 windows x64 arch:x64

9911912ea94c9d1247946057961343cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\YooouHomie\Desktop\AlisInjector\x64\Release\AlisInjector.pdb

Imports

kernel32

Process32First
VirtualFree
VirtualAlloc
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
CreateFileA
Process32Next
CloseHandle
CreateThread
GetProcAddress
GetFileSize
WriteProcessMemory
WaitForSingleObject
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
ReadFile
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceCounter
QueryPerformanceFrequency
ExitProcess
GlobalUnlock
GlobalLock
GlobalAlloc
EnterCriticalSection

user32

CreateWindowExA
SetLayeredWindowAttributes
DefWindowProcA
SetClipboardData
GetClipboardData
GetWindowLongA
SetWindowLongA
ShowWindow
TranslateMessage
DispatchMessageA
LoadIconA
PeekMessageA
UnregisterClassA
PostQuitMessage
RegisterClassExA
UpdateWindow
EmptyClipboard
LoadCursorA
CloseClipboard
OpenClipboard
GetCursorPos
GetClientRect
SetCursor
SetWindowPos
GetKeyState
MessageBoxA
SetForegroundWindow

gdi32

CreateSolidBrush

comdlg32

GetOpenFileNameA

imm32

ImmSetCompositionWindow
ImmGetContext

d3d9

Direct3DCreate9

msvcp140

_Thrd_sleep
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Xtime_get_ticks

imagehlp

ImageNtHeader

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

vcruntime140

_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
__C_specific_handler
__vcrt_InitializeCriticalSectionEx
memchr
strchr
strstr
memmove
__CxxFrameHandler3
memcpy
__std_terminate

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vsprintf
_wfopen
__stdio_common_vsscanf
__p__commode
fread
__stdio_common_vfprintf
fseek
fclose
fflush
__acrt_iob_func
ftell

api-ms-win-crt-string-l1-1-0

isprint
strncpy
strcpy_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
free

api-ms-win-crt-runtime-l1-1-0

_cexit
_seh_filter_exe
_set_app_type
_crt_atexit
_get_narrow_winmain_command_line
_initterm
_initterm_e
_exit
exit
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_invalid_parameter_noinfo_noreturn
terminate
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

api-ms-win-crt-math-l1-1-0

cosf
sinf
sqrtf
sqrt
fmodf
floor
__setusermatherr
ceil

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9911912ea94c9d1247946057961343cd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

imm32

d3d9

msvcp140

imagehlp

ntdll

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 117KB - Virtual size: 135KB

.pdata Size: 8KB - Virtual size: 7KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 512B - Virtual size: 64B

_RDATA Size: 3KB - Virtual size: 3KB

.rsrc Size: 44KB - Virtual size: 44KB

.reloc Size: 512B - Virtual size: 104B

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 117KB - Virtual size: 135KB

.pdata
Size: 8KB - Virtual size: 7KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 512B - Virtual size: 64B

_RDATA
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 44KB - Virtual size: 44KB

.reloc
Size: 512B - Virtual size: 104B