injector.rar
- SHA256 1c32da666fe28b3e82a7a260a0d54f38dc67d04fa2cfeba42c8a12bbb22857a8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
injector.rar
Resource
win10ltsc2021-20260513-it
windows10-ltsc_2021-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
injector/kursk.exe
Resource
win10ltsc2021-20260513-it
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
injector/patc.dll
Resource
win10ltsc2021-20260513-it
windows10-ltsc_2021-x64
0 signatures
150 seconds
General
- Target injector.rar
- Size 62KB
- Sample260625-vgll4sdw2w
- SHA256 1c32da666fe28b3e82a7a260a0d54f38dc67d04fa2cfeba42c8a12bbb22857a8
- MD5 f808dda7888552618bb9026d5afef193
- SHA1 92e08b33ca2c9a97658c761cc0d07bd0d9bca2ae
- SHA512 80a93216db5b0e33ddd1ceed95d61308834c8583ffdcb93ebe30c69b89bbbabad3241c18d0021485ec8b5a00b4fb4ec7133025d9999c74902bb64dc31254f148
- SSDEEP 768:yGDpqvn55z1IGY5PhJSqRpqI4L/wm52/q+/clHybZpR5arb3kvUexkfW1MgGkbGN:bpqv3KGKhJ7FYkeyE0vxkfvW6xchNK
- TLSH T1ED53023AF40EF88EFDEA06123A2035A85A346CE30DF35058AD60DB7657EA0E544ECF50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/injector/kursk.exe unpack001/injector/patc.dll
File Explorer
-
injector.rar.rar 62KB
-
injector/kursk.exe.exe 74KB
-
injector/patc.dll.dll 109KB
injector/kursk.exe
- IMPHASH 8d9c552bc3ede80f4777f18b6fa0bede
- SHA256 0b7cdf9e5459094463bfe405224f9279014d056818dae71fdb661f8c7f2b814f
- MD5 af29d2b8ca250e040c753d3126cc90c2
- SHA1 0d2f56db61b5ba14af769df7d841544b6fd6f705
- SHA512 09d60f10a817ebe765af3d9c1d056e2b8b27f8d9c1a7d2ff9f74e49f87d71ed36d4c2121ffca40747fa33052be786c9ca8a7952a9ab1eea481991dd730d260e0
- SSDEEP 1536:QxKxAGbnOog5pN3WvIdya8nfUdriN6wq7MnsQ/ZUBDhxWulzU/raiyXqnybivbUT:HXWRNQB6kPm
- TLSH T1EE730809D9A2607EC367453ADB071446DEA63C9987859EF753C19EA60CF5AE07F3C302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
53760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
CloseHandle
HeapAlloc
GetProcessHeap
GlobalMemoryStatusEx
GetStartupInfoW
OpenProcess
QueryPerformanceCounter
GetCurrentProcessId
InitializeProcThreadAttributeList
TerminateProcess
GetCurrentThreadId
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
UpdateProcThreadAttribute
SetUnhandledExceptionFilter
HeapFree
user32
FindWindowW
GetWindowThreadProcessId
advapi32
GetUserNameA
msvcp140
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
crypt32
CryptStringToBinaryA
CryptBinaryToStringA
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
dxgi
CreateDXGIFactory
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
__std_exception_destroy
memmove
memcmp
memcpy
memset
__C_specific_handler
_CxxThrowException
__current_exception
__current_exception_context
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-string-l1-1-0
isxdigit
isdigit
strlen
api-ms-win-crt-convert-l1-1-0
strtol
wcstombs
api-ms-win-crt-runtime-l1-1-0
_cexit
_set_app_type
_get_narrow_winmain_command_line
_initterm_e
exit
_exit
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
terminate
_initialize_narrow_environment
_configure_narrow_argv
_errno
_seh_filter_exe
_initterm
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35721,
count=10, id=260, version=35721,
count=27, id=261, version=35721,
count=6, id=257, version=35721,
count=13, id=257, version=33145,
count=83, id=1, productName=Unmarked objects,
count=1, id=265, version=36243,
count=1, id=258, version=36243,
injector/patc.dll
- IMPHASH ab95fbdb7547bc54a7586bb3114596ea
- SHA256 66c570500f1a53d44caaf7ce3b70cce0caf9c263c99254ef28ab9e3efc3899e5
- MD5 ead05ea695023f81e106479bb7bda995
- SHA1 5663773e6eae1628d5b1c2616a5d426d689d98d5
- SHA512 5613ef0a13931494044b7725b4926e8e10069fd42922ba2c4b41289ebf5235ac0829e0e823ea69f4cf5f778cb5a19aefa7aa036515f1595cb49056b7998bf0f9
- SSDEEP 1536:zvOd2DgYSsPSF0olcBjd0p2fFOiJcQDpjxZT6/8n1k2Op3e5yjI:zvOMkbUSoiQtHm/8n1o6yk
- TLSH T185B3D60635EC95F9E0A9B478B8767207763634480E6486EF0BD045192FF7B649EE3B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
94688
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\projects\arc_raiders\x64\Release\arc_raiders.pdb
kernel32
GetModuleHandleA
DisableThreadLibraryCalls
Beep
GetProcAddress
GetTickCount
VirtualQuery
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlCaptureContext
InitializeSListHead
user32
GetAsyncKeyState
GetSystemMetrics
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
memset
__std_exception_destroy
__std_type_info_destroy_list
__std_exception_copy
memcpy
__C_specific_handler
memmove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-math-l1-1-0
atan2
sqrtf
expf
sin
sqrt
cos
cosf
sinf
Name
.text
Size
91KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=34321,
count=8, id=260, version=34321,
count=19, id=261, version=34321,
count=6, id=257, version=34321,
count=5, id=257, version=33145,
count=63, id=1, productName=Unmarked objects,
count=3, id=265, version=34810,
count=2, id=259, version=34810,
count=1, id=255, version=34810,
count=1, id=258, version=34810,