Extreme[.]Injector[.]v3[.]7[.]3[.]-[.]by[.]master131[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Extreme.Injector.v3.7.3.-.by.master131.rar
Size

1.3MB
MD5

e27d9c1805f61c168fed543b148140d3
SHA1

12f6ac1849f1cd3a91f033a034c1dee4ea002981
SHA256

931d68378f0523627e60b92b784eb8c5499ef768276b210f8ef9ca2c75bc7b8c
SHA512

d91c407c345268e570f19aa47b30310bab0846a6f657acc39ff5aae65b555134f701ff2f3f0ea477831820cc744dc26684c66531e4da3ef968510bd4f21f21e9
SSDEEP

24576:pp4nq3hGhlcEdjYeqBRmWsGWo53eM3dIqcyL76MQ22nkchgQCebXckQuM3n+V:ppJ3KaEg9sGWowM3qqcy76F2PmVn7jMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Extreme Injector v3.exe
unpack001/Stigma_DLL -Inject onto 2014M-.dll

Files

Extreme.Injector.v3.7.3.-.by.master131.rar
.rar
Extreme Injector v3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Stigma_DLL -Inject onto 2014M-.dll
.dll windows:6 windows x86 arch:x86

bdf280e1ac17e04566d042b32c0c57a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\John\Documents\Stigma Source\Release\Stigma DLL.pdb

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
GetModuleHandleW
GetModuleHandleA
GetCurrentProcess
VirtualProtect
GetCurrentThread
GetLastError
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer

user32

TranslateMessage
DispatchMessageW
CreateMenu
CreatePopupMenu
AppendMenuW
SendMessageW
MessageBoxA
MessageBoxW
SetDlgItemTextW
PeekMessageW
DefWindowProcW
PostQuitMessage
AppendMenuA
RemoveMenu
EnableMenuItem
GetMenuState
GetMessageW
ShowWindow
CreateWindowExW
FindWindowW
RegisterClassExW
LoadCursorW
LoadIconW
CheckMenuItem
GetDlgItemTextA

msvcp120

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z

msvcr120

memset
_CxxThrowException
__clean_type_info_names_internal
?terminate@@YAXXZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_itoa_s
strcat_s
memcpy
__CxxFrameHandler3
_lock
_unlock

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 12B

bdf280e1ac17e04566d042b32c0c57a1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp120

msvcr120

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB