dll_injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dll_injector.exe
Size 192KB
Sample260709-jacvvaey8x
SHA256 0fa802942a1fe5a84c939e7aa1d645c71055a02c310b671573b769425149848f
MD5 c81bffaca1345def8c65c16a65fd81a6
SHA1 91a063d0c44054af4ec8c21005bc58d7640e6eb9
SHA512 48dfa667d461aa9874cc4425334102624a7ca4bd3741e9a04b0974af6832a92cc29b4f010585dd01fce1c5ebfe5a98658e31a7a39b2085b9694fe7e7b1ef36af
SSDEEP 3072:5072edJ2ZCa4xGga2qTDQjPtMZ+Y9U3+N5hwX/W08C:u72ey5HBDQzJv3owO08C
TLSH
T170146D16FA4120FDD0ABC0B0865646217977BC880B317EEF16A473399E75AF0BE3D658
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dll_injector.exe

File Explorer

dll_injector.exe

.exe 192KB

dll_injector.exe

IMPHASH 32198abcd13a683372485d4f765ce030
SHA256 0fa802942a1fe5a84c939e7aa1d645c71055a02c310b671573b769425149848f
MD5 c81bffaca1345def8c65c16a65fd81a6
SHA1 91a063d0c44054af4ec8c21005bc58d7640e6eb9
SHA512 48dfa667d461aa9874cc4425334102624a7ca4bd3741e9a04b0974af6832a92cc29b4f010585dd01fce1c5ebfe5a98658e31a7a39b2085b9694fe7e7b1ef36af
SSDEEP 3072:5072edJ2ZCa4xGga2qTDQjPtMZ+Y9U3+N5hwX/W08C:u72ey5HBDQzJv3owO08C
TLSH
T170146D16FA4120FDD0ABC0B0865646217977BC880B317EEF16A473399E75AF0BE3D658
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

127616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\dll_injector_uwp\dll_injector_uwp\target\release\deps\dll_injector.pdb

kernel32

CreateToolhelp32Snapshot Process32First Process32Next CloseHandle GetLastError WaitForSingleObject CreateRemoteThread OpenProcess VirtualAllocEx WriteProcessMemory GetProcAddress LoadLibraryA MultiByteToWideChar ReleaseSRWLockExclusive ReleaseMutex ReleaseSRWLockShared AddVectoredExceptionHandler SetThreadStackGuarantee AcquireSRWLockExclusive GetCurrentProcess GetCurrentThread RtlCaptureContext RtlLookupFunctionEntry SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW GetStdHandle GetCurrentProcessId TerminateProcess TryAcquireSRWLockExclusive QueryPerformanceCounter HeapAlloc GetProcessHeap HeapFree HeapReAlloc AcquireSRWLockShared WaitForSingleObjectEx CreateMutexA GetModuleHandleA GetConsoleMode GetModuleHandleW FormatMessageW GetModuleFileNameW WriteConsoleW TlsGetValue TlsSetValue GetSystemTimeAsFileTime SetUnhandledExceptionFilter IsProcessorFeaturePresent UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind InitializeSListHead GetCurrentThreadId

ntdll

RtlNtStatusToDosError NtWriteFile

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?uncaught_exception@std@@YA_NXZ

vcruntime140

__CxxFrameHandler3 __std_exception_copy __std_exception_destroy memset __C_specific_handler __current_exception __current_exception_context memcmp _CxxThrowException memcpy memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e exit _get_initial_narrow_environment _initialize_narrow_environment __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _invalid_parameter_noinfo_noreturn _configure_narrow_argv _seh_filter_exe _exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _set_app_type

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode free malloc