KaizenInjector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
KaizenInjector.exe
Size 56KB
Sample260729-e1bcgswwft
SHA256 2f135cfbde5fdf185a8a0f3fa19a049285b788bbbf9aef61edce95ad5778df40
MD5 7dfb945531fe55bc58cd9d69abfe0654
SHA1 8aecdc2521c673e87280afe663303099ce4586c1
SHA512 bb7441f6f754c81ca19ea1023da5ae61cacd0b5c9b74bdf4a2292bfb866062c80b3eb943476bcea8a320e55e7c103b694b9901845d2fe0d662e2c38acf4cd45a
SSDEEP 768:e3cMQuJ5pabfYHgEyXwgKEL1Yw+Ic36X03JfQgCWvdY7MSXtpf7DfBvFzhs:2wbfYHYSFJfQ/ASXtpzDfXzu
TLSH
T1F843091ADE1A606BD29ACD78CA424D05DE73BC864B91B5CF67400DE60F667E06F3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KaizenInjector.exe

File Explorer

KaizenInjector.exe

.exe 56KB

KaizenInjector.exe

IMPHASH 9ff2ef56373f471711e8a619b4b39118
SHA256 2f135cfbde5fdf185a8a0f3fa19a049285b788bbbf9aef61edce95ad5778df40
MD5 7dfb945531fe55bc58cd9d69abfe0654
SHA1 8aecdc2521c673e87280afe663303099ce4586c1
SHA512 bb7441f6f754c81ca19ea1023da5ae61cacd0b5c9b74bdf4a2292bfb866062c80b3eb943476bcea8a320e55e7c103b694b9901845d2fe0d662e2c38acf4cd45a
SSDEEP 768:e3cMQuJ5pabfYHgEyXwgKEL1Yw+Ic36X03JfQgCWvdY7MSXtpf7DfBvFzhs:2wbfYHYSFJfQ/ASXtpzDfXzu
TLSH
T1F843091ADE1A606BD29ACD78CA424D05DE73BC864B91B5CF67400DE60F667E06F3E702
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\emre\Desktop\cs2-internal-main\UPDATED\cs2-internal-main\injector\x64\Release\KaizenInjector.pdb

kernel32

GetStdHandle GetModuleFileNameW WaitForSingleObject OpenProcess CreateToolhelp32Snapshot GetLastError Process32NextW GetCurrentProcess CloseHandle GetProcAddress VirtualAllocEx GetModuleHandleW CreateRemoteThread VirtualFreeEx SetConsoleTitleW FindFirstFileW SetConsoleTextAttribute Process32FirstW WriteProcessMemory FindClose CreateFileW GetLocaleInfoEx FormatMessageA LocalFree GetFileAttributesExW GetFullPathNameW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte Sleep GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent

advapi32

GetTokenInformation OpenProcessToken

shell32

ShellExecuteExW

msvcp140

_Query_perf_frequency ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exception@std@@YA_NXZ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Winerror_map@std@@YAHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z _Query_perf_counter ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate memmove memset __C_specific_handler _CxxThrowException __current_exception __std_exception_destroy memcpy __current_exception_context __std_exception_copy

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_thread_local_exe_atexit_callback _c_exit _cexit _seh_filter_exe exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _set_app_type _initialize_onexit_table terminate _register_onexit_function abort _exit __p___argc __p___wargv _invoke_watson

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode