injector[.]exe | Triage™

General

Target
injector.exe
Size 11KB
Sample260531-necsvshv5l
SHA256 b53ab84dd91153c1bf858fa052d7253d88cfbd0e2aab52eec3ef243cdc6204f4
MD5 f0e60a203aaea729ef144b25eac219e6
SHA1 76746d161cbdc07846d40ba38f3c502356d14667
SHA512 501202b7d2423fd480652115dca6c8fa837fa9da799cb2a0ba39304579f736d4b832ef74545447b5b3e821262c3720c332b91798957812310ef69155fab51440
SSDEEP 192:1TJweMPcbF66W85k4/WphDw8WmTY3G7E5pz6FgI8:1FgPcbs85k4/2hDgmTj7GT
TLSH
T12C322A83FE958DF2DF5943361833813AC2EFF56113928A5367E5E51A0E35690E42A07F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector.exe

File Explorer

injector.exe

.exe 11KB

injector.exe

IMPHASH 5d5073cc1b2b2409da3b3cda27017d9f
SHA256 b53ab84dd91153c1bf858fa052d7253d88cfbd0e2aab52eec3ef243cdc6204f4
MD5 f0e60a203aaea729ef144b25eac219e6
SHA1 76746d161cbdc07846d40ba38f3c502356d14667
SHA512 501202b7d2423fd480652115dca6c8fa837fa9da799cb2a0ba39304579f736d4b832ef74545447b5b3e821262c3720c332b91798957812310ef69155fab51440
SSDEEP 192:1TJweMPcbF66W85k4/WphDw8WmTY3G7E5pz6FgI8:1FgPcbs85k4/2hDgmTj7GT
TLSH
T12C322A83FE958DF2DF5943361833813AC2EFF56113928A5367E5E51A0E35690E42A07F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6089

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteProcessMemory SetConsoleTitleA GetFullPathNameA lstrlenA WaitForSingleObject GetModuleHandleA OpenProcess GetExitCodeThread Sleep CloseHandle LoadLibraryW GetProcAddress VirtualAllocEx CreateRemoteThread VirtualFreeEx GetModuleHandleW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetCurrentThreadId IsProcessorFeaturePresent

user32

GetWindowThreadProcessId FindWindowA

msvcp140

_Query_perf_counter _Query_perf_frequency

vcruntime140

__current_exception __current_exception_context _except_handler4_common

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vfprintf __acrt_iob_func __p__commode

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _crt_atexit __p___argv _controlfp_s terminate _register_thread_local_exe_atexit_callback _configure_narrow_argv _initialize_onexit_table _initialize_narrow_environment __p___argc _get_initial_narrow_environment _exit exit _initterm_e _set_app_type _seh_filter_exe _c_exit _cexit _initterm

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing