fastflag_injector_gui_enhanced1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
fastflag_injector_gui_enhanced1.exe
Size 267KB
Sample260528-3gpyjad13m
SHA256 b2638f1fb2e824ee67668f971eb407f66ecb67266df8f337c6798b4780ce4a80
MD5 2bd43119b30b514fddd1e2ece79cc6e2
SHA1 66e3b650684c11f20d448584f2afa9405e4ab612
SHA512 428f2933555089ba50db75a134341297d80054fd435451c00ddfd7c219fddc1a51d4ba535ae70ced12c8eb2b5faf4dd8e5cf62c4ffd6ec122ad6378f55ced340
SSDEEP 3072:8D8QaxqVO1TOF3yrZuJACbHgQApKjV3WLm17c7kkbcFilTiWLKYdiaNT6V4GlJ2E:+aT1SFiCKLm17c7ONaQV3p53
TLSH
T13144B51FEAA658E1D8B6C038D153B13FF8B074A6837197D797815A070B62BE4E83E750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fastflag_injector_gui_enhanced1.exe

File Explorer

fastflag_injector_gui_enhanced1.exe

.exe 267KB

fastflag_injector_gui_enhanced1.exe

IMPHASH 3820cc0241153fcc13a3264753b7b1fa
SHA256 b2638f1fb2e824ee67668f971eb407f66ecb67266df8f337c6798b4780ce4a80
MD5 2bd43119b30b514fddd1e2ece79cc6e2
SHA1 66e3b650684c11f20d448584f2afa9405e4ab612
SHA512 428f2933555089ba50db75a134341297d80054fd435451c00ddfd7c219fddc1a51d4ba535ae70ced12c8eb2b5faf4dd8e5cf62c4ffd6ec122ad6378f55ced340
SSDEEP 3072:8D8QaxqVO1TOF3yrZuJACbHgQApKjV3WLm17c7kkbcFilTiWLKYdiaNT6V4GlJ2E:+aT1SFiCKLm17c7ONaQV3p53
TLSH
T13144B51FEAA658E1D8B6C038D153B13FF8B074A6837197D797815A070B62BE4E83E750
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

205588

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

shell32

Shell_NotifyIconW

user32

FillRect MessageBoxA GetClientRect GetWindowTextLengthA GetWindowTextA SetWindowTextA SetForegroundWindow UpdateWindow EnableWindow LoadCursorA CreateWindowExW CreateWindowExA RegisterClassW PostQuitMessage DefWindowProcA SendMessageW SendMessageA DispatchMessageA TranslateMessage GetMessageA LoadIconA ShowWindow

gdi32

SetBkColor GetStockObject DeleteObject CreateSolidBrush SetTextColor

comdlg32

GetOpenFileNameA GetSaveFileNameA

msvcp140

?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Xbad_alloc@std@@YAXXZ ??0_Lockit@std@@QEAA@H@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

kernel32

WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive Process32Next Process32First CreateToolhelp32Snapshot K32GetModuleInformation SleepConditionVariableSRW WideCharToMultiByte MultiByteToWideChar GetModuleHandleA GetModuleFileNameA WriteProcessMemory ReadProcessMemory VirtualProtectEx GetTickCount SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead K32EnumProcessModules GetLocalTime OpenProcess CreateThread Sleep CloseHandle

vcruntime140

_purecall memchr memcmp memcpy memmove memset strrchr strstr __std_exception_copy __std_exception_destroy _CxxThrowException __C_specific_handler __current_exception __current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

isdigit strncpy strlen tolower _stricmp strcmp wcscpy_s strcpy

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit terminate _errno exit _initterm_e _initterm _get_narrow_winmain_command_line _exit _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _wassert

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode free malloc realloc

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoull

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf _get_stream_buffer_pointers fopen_s __stdio_common_vsprintf_s fgetpos ungetc setvbuf fwrite ftell _fseeki64 fseek fsetpos fread fputs fputc __stdio_common_vfprintf _set_fmode fgetc fflush fclose __p__commode

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

_configthreadlocale