fastflag_injector_gui_enhanced[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
fastflag_injector_gui_enhanced.exe
Size 131KB
Sample260702-11xrdact5p
SHA256 dfbbc09b63f105f414ac5d38be6504bd828d9bd64a63bbe44178e7b7236e4987
MD5 9c2b21bc2ecd88ecee9d19d632848891
SHA1 d11fea650ac55a206abf2fcc051745f9e41353aa
SHA512 9ce77c6c615eddd1f98f5e2cc56fc2f41b071bb212d28069cfc71ac359c81029fa3aa7eec920bfbe11f02dfd6f9b16a1aba88ce84278bffade64a738ae5ed8ce
SSDEEP 3072:k3ZTBss7PK8H/REMnC0L8BaI/Ya1nM0RMvXSYo:kp9Ne8fRESJ8BhYa19RVYo
TLSH
T1BED34B2ABA59106DD27AC4B8CA530513EB727C860760A7DF63909DB10F229D4FF7BB01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fastflag_injector_gui_enhanced.exe

File Explorer

fastflag_injector_gui_enhanced.exe

.exe 131KB

fastflag_injector_gui_enhanced.exe

IMPHASH b6032e4ed992dfb9d3647f62b5b807ff
SHA256 dfbbc09b63f105f414ac5d38be6504bd828d9bd64a63bbe44178e7b7236e4987
MD5 9c2b21bc2ecd88ecee9d19d632848891
SHA1 d11fea650ac55a206abf2fcc051745f9e41353aa
SHA512 9ce77c6c615eddd1f98f5e2cc56fc2f41b071bb212d28069cfc71ac359c81029fa3aa7eec920bfbe11f02dfd6f9b16a1aba88ce84278bffade64a738ae5ed8ce
SSDEEP 3072:k3ZTBss7PK8H/REMnC0L8BaI/Ya1nM0RMvXSYo:kp9Ne8fRESJ8BhYa19RVYo
TLSH
T1BED34B2ABA59106DD27AC4B8CA530513EB727C860760A7DF63909DB10F229D4FF7BB01
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87076

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

shell32

Shell_NotifyIconW

user32

FillRect MessageBoxA GetClientRect GetWindowTextLengthA GetWindowTextA SetWindowTextA SetForegroundWindow UpdateWindow EnableWindow LoadCursorA CreateWindowExW CreateWindowExA RegisterClassW PostQuitMessage DefWindowProcA SendMessageW SendMessageA DispatchMessageA TranslateMessage GetMessageA LoadIconA ShowWindow

gdi32

SetBkColor GetStockObject DeleteObject CreateSolidBrush SetTextColor

comdlg32

GetOpenFileNameA GetSaveFileNameA

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Xbad_alloc@std@@YAXXZ ??0_Lockit@std@@QEAA@H@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ?_Xlength_error@std@@YAXPEBD@Z

kernel32

WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive Process32Next Process32First CreateToolhelp32Snapshot K32EnumProcessModules SleepConditionVariableSRW MultiByteToWideChar GetModuleHandleA GetModuleFileNameA WriteProcessMemory ReadProcessMemory VirtualQueryEx GetLocalTime OpenProcess SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead WideCharToMultiByte CreateThread Sleep CloseHandle

vcruntime140

_purecall __std_terminate strrchr strstr __std_exception_copy __std_exception_destroy _CxxThrowException memcmp memcpy memmove memset __C_specific_handler __current_exception __current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strcmp strncpy strlen tolower _stricmp wcscpy_s isdigit strcpy

api-ms-win-crt-runtime-l1-1-0

_exit exit _initterm_e _initterm _get_narrow_winmain_command_line _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe _cexit _crt_atexit _initialize_onexit_table _wassert _set_app_type _register_onexit_function _initialize_narrow_environment _errno _configure_narrow_argv terminate

api-ms-win-crt-heap-l1-1-0

realloc _set_new_mode malloc _callnewh free

api-ms-win-crt-convert-l1-1-0

strtol atoi

api-ms-win-crt-stdio-l1-1-0

fopen_s __stdio_common_vsprintf_s fgetc __stdio_common_vsprintf __stdio_common_vfprintf fclose fflush ungetc setvbuf fwrite ftell _fseeki64 fseek fsetpos fread _set_fmode fputc fgetpos _get_stream_buffer_pointers __p__commode

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-math-l1-1-0

__setusermatherr ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale