Injector[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Injector.exe
Size

313KB
MD5

3a2c40374e1639e902dcd144409b50f9
SHA1

1d43fde50f280799818ef3c2bbc314926d70675c
SHA256

51547474b5fd081ceaf9d41b42147438f9c820ec2951db3975049605da108f51
SHA512

68b18e5d92e963d360f21dff85a9ce4d1cc3d697ca21bfa6b933e7bdac21f8fe5e791700eddf5a6f1a54443124526f2e82fb272f8e6339b9718c57d4d03343af
SSDEEP

6144:ffMtQB3UjnN4dZ3faBv/JqYXiJ0hxdOj+mHqts6Llt6P+SBTOQ6u55C3klSf8:fEtQBE4WBv/OJ0hvgHqP621Q6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Injector.exe

Files

Injector.exe
.exe windows:4 windows x86 arch:x86

Password: 2024

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\my2fkj5\obj\Release\' .pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ