fastflag_injector_gui_enhanced (3) (1) (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
fastflag_injector_gui_enhanced (3) (1) (1).exe
Size 267KB
Sample260622-nyrfcsby31
SHA256 0e30b94418482ce6d0b8cfacb7fc4842571f48bf8732ca700e314af27da46b2d
MD5 c0e20c7fb043ac8979f8ebd1798fddf2
SHA1 1d04fe8fa2017010afcce57306f08a044e6bf685
SHA512 5203cf77ef47d717de9910f7e0c58258c0d903b848188afb8737547bddf2314141d0aa6540393897b998d0783ea0eb120c74cef8b9efee10885eab3f73d3f5a2
SSDEEP 3072:mvZY6xuHfh3afmcAt8guApy58q4nLm17nkLs1RlTilLzDV3adtl1MGlJ2oD3E6Rl:cYHfh3ifaLm17Jkat1LRM4W
TLSH
T1B144B61FEAE618E1D9B6C0389153B13FF8B174A6437197D7A7815A070B62BE4E83E740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fastflag_injector_gui_enhanced (3) (1) (1).exe

File Explorer

fastflag_injector_gui_enhanced (3) (1) (1).exe

.exe 267KB

fastflag_injector_gui_enhanced (3) (1) (1).exe

IMPHASH 239f206745613d6354d2cb298831d7a3
SHA256 0e30b94418482ce6d0b8cfacb7fc4842571f48bf8732ca700e314af27da46b2d
MD5 c0e20c7fb043ac8979f8ebd1798fddf2
SHA1 1d04fe8fa2017010afcce57306f08a044e6bf685
SHA512 5203cf77ef47d717de9910f7e0c58258c0d903b848188afb8737547bddf2314141d0aa6540393897b998d0783ea0eb120c74cef8b9efee10885eab3f73d3f5a2
SSDEEP 3072:mvZY6xuHfh3afmcAt8guApy58q4nLm17nkLs1RlTilLzDV3adtl1MGlJ2oD3E6Rl:cYHfh3ifaLm17Jkat1LRM4W
TLSH
T1B144B61FEAE618E1D9B6C0389153B13FF8B174A6437197D7A7815A070B62BE4E83E740
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

205636

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

shell32

ShellExecuteA Shell_NotifyIconW

user32

MessageBoxA GetClientRect GetWindowTextLengthA GetWindowTextA SetWindowTextA SetForegroundWindow UpdateWindow EnableWindow ShowWindow LoadCursorA CreateWindowExA RegisterClassW PostQuitMessage DefWindowProcA SendMessageW SendMessageA DispatchMessageA TranslateMessage GetMessageA FillRect LoadIconA CreateWindowExW

gdi32

SetBkColor GetStockObject DeleteObject CreateSolidBrush SetTextColor

comdlg32

GetOpenFileNameA GetSaveFileNameA

msvcp140

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Xbad_alloc@std@@YAXXZ ??0_Lockit@std@@QEAA@H@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ?_Xout_of_range@std@@YAXPEBD@Z

kernel32

WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive Process32Next Process32First CreateToolhelp32Snapshot K32GetModuleInformation GetCurrentThreadId SleepConditionVariableSRW MultiByteToWideChar GetModuleHandleA GetModuleFileNameA WriteProcessMemory ReadProcessMemory VirtualProtectEx GetTickCount GetLocalTime SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter WideCharToMultiByte GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead K32EnumProcessModules OpenProcess CreateThread Sleep CloseHandle

vcruntime140

_purecall memchr memcmp memcpy memmove memset strrchr strstr __std_exception_copy __std_exception_destroy _CxxThrowException __C_specific_handler __current_exception __current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

isdigit strncpy strlen tolower _stricmp strcmp wcscpy_s strcpy

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit terminate _errno exit _initterm_e _initterm _get_narrow_winmain_command_line _exit _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _wassert

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode free malloc realloc

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoull

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf _get_stream_buffer_pointers fopen_s __stdio_common_vsprintf_s fgetpos ungetc setvbuf fwrite ftell _fseeki64 fseek fsetpos fread fputs fputc __stdio_common_vfprintf _set_fmode fgetc fflush fclose __p__commode

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

_configthreadlocale