Static task
static1
Behavioral task
behavioral1
Sample
injector.exe
Resource
win10v2004-20240802-en
General
-
Target
injector.exe
-
Size
500KB
-
MD5
18c2b15c53f17e895b6390dfaa18e19e
-
SHA1
dedb9dd67a3075cf5e8e894a96077df0c284f121
-
SHA256
28d9cf8d469d3c58cab76a6af75b1183c74d8b9f4995f4af373e903796473b7d
-
SHA512
154d8a502ef52c2641fe52cb5f29b28ba1e9f0e9220935900cc820f976889d004b27fffad1d85dc694f8864984044282e463a17482fae81de2fa99b3649a802e
-
SSDEEP
6144:ErFaZ1yE4X10cA4PyPHSmiSU6Y3NIcL6tyrSL5H1GGX+I0nEI4JGR13UWqMDac:5udfA+b6GNIcL6t5H90nlH3Ub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource injector.exe
Files
-
injector.exe.exe windows:6 windows x64 arch:x64
5d5d7a805980d8db1a5c2a783b1d6e93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
Sleep
LoadLibraryA
CloseHandle
FreeLibrary
VirtualFree
SetConsoleTitleA
GetCurrentProcess
DeviceIoControl
CreateFileA
GetModuleHandleW
GetFileInformationByHandleEx
AreFileApisANSI
GetTempPathW
SetFileInformationByHandle
GetFullPathNameW
GetFileAttributesW
LoadLibraryExA
CreateFileW
GetLocaleInfoEx
FormatMessageA
LocalFree
GetCurrentThreadId
SleepConditionVariableSRW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WakeAllConditionVariable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
GetCurrentProcessId
HeapAlloc
HeapReAlloc
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
VirtualAlloc
GetLastError
SetLastError
QueryPerformanceCounter
GetProcAddress
QueryPerformanceFrequency
GetModuleHandleA
GlobalUnlock
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
WideCharToMultiByte
GlobalLock
OpenProcess
GlobalFree
GlobalAlloc
MultiByteToWideChar
GetSystemTimeAsFileTime
InitializeSListHead
user32
GetWindowThreadProcessId
CloseClipboard
OpenClipboard
GetClipboardData
EmptyClipboard
SetClipboardData
GetCursorPos
DispatchMessageA
GetWindowRect
DestroyWindow
SetWindowPos
GetActiveWindow
ShowWindow
SetWindowLongA
EnumWindows
TranslateMessage
PeekMessageA
FindWindowA
UpdateWindow
GetKeyState
SetCursorPos
GetClientRect
SetCursor
MessageBoxA
LoadCursorW
GetForegroundWindow
ClientToScreen
ScreenToClient
advapi32
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
RegCreateKeyA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyA
RegOpenKeyExA
msvcp140
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
??0_Lockit@std@@QEAA@H@Z
_Thrd_join
?_Winerror_map@std@@YAHH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Thrd_detach
??1_Lockit@std@@QEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_frequency
_Mtx_unlock
_Query_perf_counter
_Mtx_lock
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_Cpp_error@std@@YAXH@Z
msvcp140_atomic_wait
__std_atomic_wait_direct
__std_atomic_notify_all_direct
ntdll
RtlInitUnicodeString
NtQuerySystemInformation
RtlAnsiStringToUnicodeString
RtlInitAnsiString
dbghelp
ImageRvaToVa
ImageNtHeader
ImageDirectoryEntryToData
d3d11
D3D11CreateDeviceAndSwapChain
imm32
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
_CxxThrowException
__current_exception_context
__current_exception
memcpy
memchr
__C_specific_handler
wcsstr
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memmove
memcmp
api-ms-win-crt-stdio-l1-1-0
fputc
fgetc
__stdio_common_vsscanf
fread
fgetpos
__stdio_common_vsprintf
_wfopen
fwrite
_fseeki64
fsetpos
fseek
fclose
fflush
_set_fmode
_get_stream_buffer_pointers
setvbuf
ungetc
__stdio_common_vfprintf
__acrt_iob_func
getchar
ftell
__p__commode
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
exit
_initialize_onexit_table
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
terminate
_invalid_parameter_noinfo_noreturn
system
_initialize_narrow_environment
_crt_atexit
__p___argv
_configure_narrow_argv
__p___argc
_beginthreadex
abort
_wassert
_exit
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
api-ms-win-crt-string-l1-1-0
_stricmp
strcmp
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-environment-l1-1-0
_dupenv_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
sqrtf
__setusermatherr
cosf
acosf
ceilf
sinf
Sections
.text Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ