Fearsome injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Fearsome injector.exe
Size 257KB
Sample260628-sn7f2sh19k
SHA256 21c50ec2e15eb2c6d2a2603e75f1bc25687952dabbc26276213781aab9171ed1
MD5 278f44f502db3abfc30e3877e10448f8
SHA1 85d9e3093bb972336655a6d00f08f4cb6dedd904
SHA512 28dfebcc6178be3ee4f214bd76b9c304c7af3236215360bd84ba817db39a496fd282d2dfa182e9f64dc5fb46791bf80c247c2194ea62c11d9054b2454e2bd765
SSDEEP 6144:5uvPveSq52czTekfgrMWm0dxsBeCubSE:5UPu52czqkCMt0rBC5
TLSH
T184449E16B3A501F9E577D278CA525612F27378150730AAEF07A083B6AF23AD1BD3DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fearsome injector.exe

File Explorer

Fearsome injector.exe

.exe 257KB

Fearsome injector.exe

IMPHASH ae2b46ac62ef74ab96bb034e0287c1f7
SHA256 21c50ec2e15eb2c6d2a2603e75f1bc25687952dabbc26276213781aab9171ed1
MD5 278f44f502db3abfc30e3877e10448f8
SHA1 85d9e3093bb972336655a6d00f08f4cb6dedd904
SHA512 28dfebcc6178be3ee4f214bd76b9c304c7af3236215360bd84ba817db39a496fd282d2dfa182e9f64dc5fb46791bf80c247c2194ea62c11d9054b2454e2bd765
SSDEEP 6144:5uvPveSq52czTekfgrMWm0dxsBeCubSE:5UPu52czqkCMt0rBC5
TLSH
T184449E16B3A501F9E577D278CA525612F27378150730AAEF07A083B6AF23AD1BD3DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

50916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

DispatchMessageW TranslateMessage SendMessageW SystemParametersInfoW IsDialogMessageW DrawIconEx LoadImageW DestroyIcon LoadIconW LoadCursorW GetClassNameW EnumChildWindows GetParent GetWindowLongPtrW SetWindowLongW GetWindowLongW FillRect MapWindowPoints MessageBoxW AdjustWindowRectEx GetWindowRect GetClientRect GetWindowTextW SetWindowTextW RedrawWindow InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow DrawTextW GetSystemMetrics EnableWindow KillTimer SetTimer GetKeyState GetFocus SetFocus GetDlgCtrlID IsIconic SetWindowPos MoveWindow ShowWindow DestroyWindow IsWindow CreateWindowExW RegisterClassExW UnregisterClassW RegisterClassW PostQuitMessage DefWindowProcW GetMessageW

gdi32

MoveToEx ExtCreatePen CreateDIBSection SetTextColor SetBkMode SetBkColor SelectObject RoundRect Rectangle LineTo GetStockObject DeleteObject DeleteDC CreateSolidBrush CreatePen CreateFontIndirectW CreateCompatibleDC

comctl32

ImageList_SetBkColor ImageList_Create ord413 ord412 ord410 ImageList_DrawEx InitCommonControlsEx ImageList_ReplaceIcon ImageList_Add ImageList_Destroy

comdlg32

GetOpenFileNameW

shlwapi

PathAppendW PathCombineW PathFindFileNameW PathRemoveFileSpecW StrStrIW

shell32

CommandLineToArgvW ShellExecuteW ShellExecuteExW SHGetFileInfoW

uxtheme

SetWindowTheme

advapi32

CheckTokenMembership AllocateAndInitializeSid FreeSid

kernel32

GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType HeapAlloc HeapFree GetCPInfo IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetStdHandle GetModuleHandleExW FreeLibrary GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap SetStdHandle GetStringTypeW SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode UnhandledExceptionFilter TerminateProcess GetCurrentProcess DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError CreateFileW WriteConsoleW WriteFile GetFullPathNameW GetCommandLineW GetEnvironmentVariableW DeleteFileW GetFileAttributesW GetTempPathW CloseHandle GetLastError WaitForSingleObject GetCurrentProcessId ExitProcess CreateRemoteThread GetExitCodeThread CreateProcessW OpenProcess GetTickCount64 VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleFileNameW GetModuleHandleW GetProcAddress LocalFree FormatMessageW QueryFullProcessImageNameW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW CopyFileW CreateToolhelp32Snapshot Process32FirstW Process32NextW SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Fearsome injector.exe

user32

gdi32

comctl32

comdlg32

shlwapi

shell32

uxtheme

advapi32

kernel32

generic