injector_frfr_BETA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

injector_frfr_BETA.exe
Size

9KB
MD5

f39f4331a31e9477646637727d95d116
SHA1

5300e54c81169ee820cb9f16273962933422f784
SHA256

6732876b29f43de97f79250537cd8e27cacf6f42de43ebf9b2440c218ffc6e2f
SHA512

5cc712827ff2539b8a53eb22d09c24c3c20b1d11836702ce1e335d0edcd67a1c925453c1431fa5e4defbeac2f68f42a4ecc0a04fbb9cdc4727d5536833e6a0d9
SSDEEP

192:wN2YtsKtGE8T69B/jV5gse36DPvzKV48f8skwS0P8Ia:wN2YtsKtGE8TyFgse3IWV3fvt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector_frfr_BETA.exe

Files

injector_frfr_BETA.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\mikke\Downloads\injector\injector frfr (BETA)\injector frfr (BETA)\obj\Debug\injector frfr (BETA).pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ