Resubmissions
05/03/2025, 23:56
250305-3y297asxas 1005/03/2025, 23:56
250305-3yzt3atky5 1005/03/2025, 23:55
250305-3ywseatky2 1005/03/2025, 23:55
250305-3yq7xsswh1 1005/03/2025, 23:55
250305-3ynrssswhz 1005/03/2025, 23:54
250305-3x6afstkv6 1005/03/2025, 23:54
250305-3x43dstkv5 1005/03/2025, 23:54
250305-3x4fvstkv4 1005/03/2025, 23:51
250305-3wmrqaswdz 10Static task
static1
Behavioral task
behavioral1
Sample
ExodusInject.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
ExodusInject.exe
Resource
win7-20241010-en
Behavioral task
behavioral3
Sample
ExodusInject.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral4
Sample
ExodusInject.exe
Resource
win10ltsc2021-20250217-en
General
-
Target
ExodusInject.exe
-
Size
227KB
-
MD5
38b7704d2b199559ada166401f1d51c1
-
SHA1
3376eec35cd4616ba8127b976a8667e7a0aac87d
-
SHA256
153825af8babb75361f4af359bfdd5e95cbdc7f263db5c4e70ac1da8f36bc564
-
SHA512
07b828073c8f80c5498501c8f64decb5effa702c8bc3d60a2f7d5de36d493b469cbbf413fb0c92c0aadd6ee139bfb75f3b9e936230212d42e57d2ec5671e9b27
-
SSDEEP
3072:iBIVzZQgudhV3mypQgbNjcEHBAnpK37nXY8q004Q78ePsi74tyJhbgKL/VoilIBS:Ur3mypQX8mOeP/9/VtLGH+8l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ExodusInject.exe
Files
-
ExodusInject.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ