Extreme Injector[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Extreme Injector.exe
Size

100.3MB
MD5

6dd16a8afd596df1efafc9a81eec93ce
SHA1

4d0e931f42e3a4b0f9c133448ed8d479be61708e
SHA256

fdb50856dec63d5487700faa9f14ace86e1e2f135481eb22bdce813e591c9661
SHA512

19154b52a88c6de37ab2ceb72edb707769bbc6ae83c516e45fecde080d7d37936a23e5c43f330917a085faff84b007c47b6bbbda57b58b3739aacc703e6e6f07
SSDEEP

6144:+14CxqZZBh1HXI4Gt1ZDEi12IeZ95s2UFKtpBMNlyZfGQq:tUEhXIDNj18s2IKtp0yZzq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Extreme Injector.exe

Files

Extreme Injector.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AVP.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ