injectorcpp[.]exe | Triage™

General

Target
injectorcpp.exe
Size 17KB
Sample260625-ncxp9aa19v
SHA256 315256f688042b378e67c7b9d9fd48e35aacdfa9b42c28571db34d6d97adde08
MD5 fedb68703595c44a2068dbf0048094e0
SHA1 a3e4321ab07185237a2ee11423ec551a3d7e01c8
SHA512 a0c1ad2e2a519aa7bc35855c90cc9662bd97f46c2e013c96a0f92288fc6ddb79ab7a1b13a6bf6ccd5925c716d862ebb771067b080fed9f64e8bd36821b2cd3c0
SSDEEP 192:Q4SQBy32o2wQS6G+rQOwTiYRijOLvoDPPlkNV5RZc1Ei6bN1tZYWpbW5tfhX29D+:VWjVx6G+r+ZZTozPuV+1EXIEs29ee
TLSH
T1AC724A8EE7564CD6D13AD23DC9729911F2B6B2010732A7DF63D0912D0E7BBC0EA76A40
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injectorcpp.exe

File Explorer

injectorcpp.exe

.exe 17KB

injectorcpp.exe

IMPHASH 039fc8527ce55456281bbcf0064960a3
SHA256 315256f688042b378e67c7b9d9fd48e35aacdfa9b42c28571db34d6d97adde08
MD5 fedb68703595c44a2068dbf0048094e0
SHA1 a3e4321ab07185237a2ee11423ec551a3d7e01c8
SHA512 a0c1ad2e2a519aa7bc35855c90cc9662bd97f46c2e013c96a0f92288fc6ddb79ab7a1b13a6bf6ccd5925c716d862ebb771067b080fed9f64e8bd36821b2cd3c0
SSDEEP 192:Q4SQBy32o2wQS6G+rQOwTiYRijOLvoDPPlkNV5RZc1Ei6bN1tZYWpbW5tfhX29D+:VWjVx6G+r+ZZTozPuV+1EXIEs29ee
TLSH
T1AC724A8EE7564CD6D13AD23DC9729911F2B6B2010732A7DF63D0912D0E7BBC0EA76A40
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\user\source\repos\injectorcpp\x64\Release\injectorcpp.pdb

kernel32

GetFileAttributesW OpenProcess CreateToolhelp32Snapshot GetExitCodeThread Sleep Process32NextW Process32FirstW WaitForSingleObject GetProcAddress VirtualAllocEx GetModuleHandleW GetConsoleWindow CreateRemoteThread VirtualFreeEx GetCurrentThreadId CloseHandle WriteProcessMemory GetCurrentProcessId QueryPerformanceCounter InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime

comdlg32

GetOpenFileNameW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception _CxxThrowException memset __std_exception_destroy __std_exception_copy memcpy __C_specific_handler memmove

api-ms-win-crt-string-l1-1-0

_wcsicmp wcslen

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _seh_filter_exe __p___wargv __p___argc _initialize_onexit_table _register_onexit_function _crt_atexit terminate _exit exit _initterm_e _get_initial_wide_environment _initialize_wide_environment _initterm _configure_wide_argv _cexit _set_app_type

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing