Static task
static1
General
-
Target
Artur Idiotov-Script-2024081-184a.zip
-
Size
171.3MB
-
MD5
8e5fe2baa340205a34b635efa948428f
-
SHA1
05c9493ea7662294941bb390b011eac3cf346d8c
-
SHA256
b77146483344f7931c1271ff1dc226e812a4506c4a7d94e6bf23bcdc8d43d08c
-
SHA512
f3ea052d613b61bd7a7fea1ff029716773ce6a09d3e7e359a851481f8667db19c970496c65d59ca5c7e03fd9b08cb19bb7c51de93c27db6671473175703b47b1
-
SSDEEP
3145728:LMyURKQVpxVyLFPRC/UiwQHpzE2N0+rmEmyPS4jgcYc2lgx3Uyc2lgx3Uyg2lgxO:4yURfVpbyLtRC/UiwQHpzE2N0+rmED32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/lnjector.exe
Files
-
Artur Idiotov-Script-2024081-184a.zip.zip
-
Script/README(Chinese).txt
-
Script/README(Deutscsh).txt
-
Script/README(ENGLISH).txt
-
Script/README(Japanese).txt
-
Script/README(Portuguese).txt
-
Script/lnjectоr.zip.zip
-
README.txt
-
lnjеctor.zip.zip
-
Main.xml
-
Resource/_afux.xml
-
Resource/_ag.xml
-
Resource/_aglc.xml
-
Resource/_agni.xml
-
Resource/_aigg.xml
-
Resource/_al.xml
-
Resource/_an/_ak/654456 (6).mp4
-
Resource/_an/_ak/654456 (7).mp4
-
Resource/_bd/654456 (5).mp4
-
lnjector.exe.exe windows:6 windows x64 arch:x64
f3c3336c9223a9117f0fee4917250498
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
LoadLibraryA
LoadLibraryW
GetProcAddress
LocalFree
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
CreateProcessA
GetComputerNameA
SetEndOfFile
WriteConsoleW
FormatMessageW
CreateFileW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
Sleep
GetEnvironmentVariableW
lstrlenW
HeapSize
VirtualProtect
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
ReadFile
CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapFree
HeapAlloc
GetFileType
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
RtlUnwind
user32
GetClientRect
PostQuitMessage
SendMessageW
LoadIconW
GetMessageW
DefWindowProcW
MessageBoxW
CreateWindowExW
UpdateWindow
ShowWindow
DispatchMessageW
RegisterClassW
TranslateMessage
gdi32
SetTextColor
SetBkColor
CreateSolidBrush
CreateFontW
shell32
ShellExecuteW
SHGetFolderPathA
SHGetFolderPathW
ole32
CoUninitialize
CoInitialize
shlwapi
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathFindFileNameW
StrCmpW
PathCombineW
PathIsDirectoryW
StrStrW
StrCatW
mpr
WNetGetConnectionW
WNetCancelConnection2W
WNetGetUniversalNameW
WNetOpenEnumW
WNetAddConnection2W
WNetEnumResourceW
WNetGetLastErrorW
WNetGetResourceInformationW
WNetCloseEnum
urlmon
URLDownloadToFileW
Sections
.text Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 124.5MB - Virtual size: 124.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ