injector[.]exe | Triage™

Resubmissions

07/07/2026, 11:23

260707-ng89vady7p3

07/07/2026, 11:20

260707-nfph2sgx5x3

Sharing

Copy URL Twitter E-mail

General

Target
injector.exe
Size 2.3MB
Sample260707-nfph2sgx5x
SHA256 0eb4c265eb5802b2a99ac6b420872d97a95f2cdff7b12581d2c3d0c795b60fa7
MD5 977b07c7bb115f66b700188aa30ccc2b
SHA1 603cb0393d5bfe51957720baa6e0500b2d4c6498
SHA512 a0090ef876b97791da47606154c8ca7b8dced142bd377668183ccfe17b0a323e88190a564f46f332f7c6139bf59bfc823465e63a7b3e282d2df629dc1b697385
SSDEEP 49152:/juQZeWus+Gbbfxp6TMlUrxjBamq6tEx0aHudaniAXhnH:ruQZ2+p6TMlUrxjBamq6GC7
TLSH
T1EAB5AF59B3E841FCD07BD178CA579607E7B23448032096DB33E886592FA3BF4667AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector.exe

File Explorer

injector.exe

.exe 2.3MB

injector.exe

IMPHASH 1a23fae66d70b6fe5c60b280938b1cba
SHA256 0eb4c265eb5802b2a99ac6b420872d97a95f2cdff7b12581d2c3d0c795b60fa7
MD5 977b07c7bb115f66b700188aa30ccc2b
SHA1 603cb0393d5bfe51957720baa6e0500b2d4c6498
SHA512 a0090ef876b97791da47606154c8ca7b8dced142bd377668183ccfe17b0a323e88190a564f46f332f7c6139bf59bfc823465e63a7b3e282d2df629dc1b697385
SSDEEP 49152:/juQZeWus+Gbbfxp6TMlUrxjBamq6tEx0aHudaniAXhnH:ruQZ2+p6TMlUrxjBamq6GC7
TLSH
T1EAB5AF59B3E841FCD07BD178CA579607E7B23448032096DB33E886592FA3BF4667AB11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1138304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\witte\Downloads\bloodstrike_cheat\injector\x64\Release\injector.pdb

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

ntdll

VerSetConditionMask

winhttp

WinHttpQueryHeaders WinHttpCloseHandle WinHttpOpen WinHttpSendRequest WinHttpOpenRequest WinHttpConnect WinHttpReceiveResponse

kernel32

VirtualProtect CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameA GetModuleFileNameW GetModuleHandleW AddDllDirectory SetDefaultDllDirectories QueryFullProcessImageNameW SetDllDirectoryW SetLastError FormatMessageW ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSection EnterCriticalSection LeaveCriticalSection LocalFree LoadLibraryW SleepEx GetSystemInfo GetTickCount MoveFileExW WaitForSingleObjectEx GlobalFree GetTickCount64 ReadFile PeekNamedPipe WaitForMultipleObjects VerifyVersionInfoW GetFileSizeEx OutputDebugStringW GetLocaleInfoEx FormatMessageA SetFileInformationByHandle CreateFile2 AreFileApisANSI GetFileInformationByHandleEx WakeAllConditionVariable GetSystemTimeAsFileTime GetFileAttributesA CreateFileW QueryPerformanceCounter GetCurrentThreadId CreateThread GetCurrentProcessId DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc FreeLibrary QueryPerformanceFrequency GetSystemDirectoryW HeapAlloc HeapDestroy GetFileType AddVectoredExceptionHandler LoadLibraryA GlobalAlloc MultiByteToWideChar GetSystemTime GetLocaleInfoA GlobalUnlock GetStdHandle GlobalLock WideCharToMultiByte SystemTimeToFileTime SetSystemTime IsDebuggerPresent ExitProcess GetProcAddress CloseHandle Process32FirstW Process32NextW GetLastError Sleep GetExitCodeThread CreateToolhelp32Snapshot OpenProcess GetModuleHandleA WaitForSingleObject VirtualAlloc GetCurrentProcess VirtualFree SleepConditionVariableSRW GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileW InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetFileAttributesExW GetEnvironmentVariableA

user32

UpdateWindow PostQuitMessage LoadCursorW TranslateMessage PeekMessageW DispatchMessageW ShowWindow RegisterClassExW UnregisterClassW GetSystemMetrics ScreenToClient CreateWindowExW DestroyWindow MessageBoxA FindWindowW SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos GetCapture SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor SetCapture GetForegroundWindow GetKeyState DefWindowProcW GetKeyboardLayout TrackMouseEvent GetMessageExtraInfo ClientToScreen

advapi32

CryptHashData AdjustTokenPrivileges LookupPrivilegeValueW AddAccessAllowedAce GetLengthSid GetTokenInformation InitializeAcl IsValidSid RegCreateKeyExA RegDeleteKeyA SetSecurityInfo CopySid CryptEncrypt CryptImportKey CryptDestroyKey SystemFunction036 CryptDestroyHash OpenProcessToken CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW ConvertSidToStringSidA

shell32

ShellExecuteW ShellExecuteA

msvcp140

??1_Lockit@std@@QEAA@XZ ?uncaught_exception@std@@YA_NXZ _Xtime_get_ticks _Query_perf_counter _Query_perf_frequency ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Xbad_function_call@std@@YAXXZ ?_Random_device@std@@YAIXZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$ctype@D@std@@2V0locale@2@A ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??0_Lockit@std@@QEAA@H@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Xinvalid_argument@std@@YAXPEBD@Z _Thrd_detach _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ

crypt32

CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringW CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertOpenStore CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain CertCloseStore

ws2_32

socket WSAIoctl __WSAFDIsSet select htons setsockopt htonl listen recvfrom sendto ioctlsocket gethostname WSAResetEvent recv getsockname WSASetLastError WSAStartup ntohs WSACleanup bind connect accept WSAGetLastError closesocket getpeername ntohl getaddrinfo freeaddrinfo inet_pton inet_ntop getsockopt send WSACloseEvent WSAWaitForMultipleEvents WSACreateEvent WSAEnumNetworkEvents WSAEventSelect

imm32

ImmReleaseContext ImmSetCandidateWindow ImmGetContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

shlwapi

PathFindFileNameW

httpapi

HttpCreateUrlGroup HttpSendHttpResponse HttpReceiveHttpRequest HttpInitialize HttpCreateRequestQueue HttpCreateServerSession HttpAddUrlToUrlGroup HttpSetUrlGroupProperty

psapi

GetModuleInformation

wintrust

WinVerifyTrust

dnsapi

DnsFree DnsQuery_A

userenv

UnloadUserProfile

bcrypt

BCryptGenRandom

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strrchr __current_exception_context __current_exception __C_specific_handler wcschr strstr memset memmove memcpy memcmp memchr _CxxThrowException strchr __std_terminate __std_exception_copy __std_exception_destroy

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh _set_new_mode calloc realloc

api-ms-win-crt-utility-l1-1-0

srand qsort

api-ms-win-crt-runtime-l1-1-0

abort terminate __sys_nerr _resetstkoflw _crt_atexit _register_onexit_function _initialize_onexit_table __sys_errlist system _beginthreadex _errno _invalid_parameter_noinfo _register_thread_local_exe_atexit_callback _c_exit _cexit _exit _invoke_watson _seh_filter_exe _set_app_type exit _configure_narrow_argv _initialize_narrow_environment _get_narrow_winmain_command_line _initterm _initterm_e

api-ms-win-crt-time-l1-1-0

_gmtime64_s strftime _gmtime64 _localtime64 _time64

api-ms-win-crt-string-l1-1-0

towlower strcmp strlen wcslen _stricmp _strdup _wcsicmp _wcsdup strcspn strncpy_s strncmp wcspbrk strncpy strspn wcsncmp strpbrk isxdigit isspace tolower wcsncpy

api-ms-win-crt-stdio-l1-1-0

_set_fmode _lseeki64 _get_stream_buffer_pointers fgetc _wfopen _wopen __p__commode fgetpos fgets feof fputs fputc fsetpos __stdio_common_vsprintf _fseeki64 _read _write fread __stdio_common_vsscanf _fileno _close ftell fwrite ungetc __stdio_common_vfprintf fseek _pclose __acrt_iob_func fflush setvbuf _popen fclose

api-ms-win-crt-convert-l1-1-0

strtoll strtoul wcstombs strtoull strtol strtod atoi

api-ms-win-crt-math-l1-1-0

sqrtf __setusermatherr _dclass sinf fmodf _fdopen cosf ceilf _dsign acosf

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_wstat64 _lock_file _fstat64 _unlock_file _unlink

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func localeconv