injector (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
injector (1).exe
Size 18KB
Sample260710-tnelpsez7w
SHA256 8dc3165995c031fd14847b7b44b61c0894e6ea44f424a49fd8c81966ed119722
MD5 8e4c202ccc19be9b4181dbe12ff6631b
SHA1 0fc4eb4d24e66680ef07cd24d550977203254a7e
SHA512 ebea727e20c9bf5a6d0d90e63b859f34b59710c453a170576043eb3796e8f7af2f5aff67e225443ca3f77c903db470347b623da5c4a08c64ab7e4c5c48957cab
SSDEEP 192:ozsK06aEukSYAHhCf/iroJhjSnYoJvOE5tJjHM2jpGdd+0kx4mfwVSy60dj3Q5XL:oRiYy8fooHjsYoYE5tAdY0r341d
TLSH
T16A822B0BFB8744F9E175833D82B64A24E1B2B41643226BCF63D195190FBB7C4AD73A42
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector (1).exe

File Explorer

injector (1).exe

.exe 18KB

injector (1).exe

IMPHASH 490918ccbaec8df15bbf0670cd5eddf3
SHA256 8dc3165995c031fd14847b7b44b61c0894e6ea44f424a49fd8c81966ed119722
MD5 8e4c202ccc19be9b4181dbe12ff6631b
SHA1 0fc4eb4d24e66680ef07cd24d550977203254a7e
SHA512 ebea727e20c9bf5a6d0d90e63b859f34b59710c453a170576043eb3796e8f7af2f5aff67e225443ca3f77c903db470347b623da5c4a08c64ab7e4c5c48957cab
SSDEEP 192:ozsK06aEukSYAHhCf/iroJhjSnYoJvOE5tJjHM2jpGdd+0kx4mfwVSy60dj3Q5XL:oRiYy8fooHjsYoYE5tAdY0r341d
TLSH
T16A822B0BFB8744F9E175833D82B64A24E1B2B41643226BCF63D195190FBB7C4AD73A42
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\(❁´◡`❁)\Desktop\DLL-injector-ReFo\DLL-injector-ReFo\x64\Release\injector.pdb

kernel32

Process32First WriteProcessMemory WaitForSingleObject GetModuleHandleA OpenProcess CreateToolhelp32Snapshot Sleep GetTempPathA DeleteFileA Process32Next CloseHandle GetProcAddress VirtualAllocEx CreateRemoteThread VirtualFreeEx GetTempFileNameA GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?good@ios_base@std@@QEBA_NXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

urlmon

URLDownloadToFileA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception __current_exception_context memcmp _CxxThrowException __C_specific_handler __std_terminate __std_exception_copy memcpy memset __std_exception_destroy

api-ms-win-crt-string-l1-1-0

strlen strcpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode malloc free

api-ms-win-crt-runtime-l1-1-0

_cexit __p___argv __p___argc _exit _initialize_onexit_table _register_thread_local_exe_atexit_callback _crt_atexit terminate exit _initterm_e _initterm _register_onexit_function _seh_filter_exe _c_exit _initialize_narrow_environment _configure_narrow_argv _get_initial_narrow_environment _set_app_type

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale