jar_mods_injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
jar_mods_injector.exe
Size 5.4MB
Sample260803-2cfcvs1zfs
SHA256 0d577d29185c72eec169ea4c0cd171f07815b06d01926ff7de1a3bb896f5bbb5
MD5 4dd6bef74876037046ee8c40a0338bef
SHA1 1dff6dc4065918a4d55249109cca9ee8cf112725
SHA512 26bbeec274f376d90a29fb53ac606e673e0db8ac7a3351e3d6bc4cc22b9c89fb31699a5173e4a8f2ed0ced8bee1b62fac44ed4d790433d84b6169e40e54edc76
SSDEEP 49152:MlZi8lgDOQVi+6+FWcrlMrby+EIY1hYi/Cq2smDK/eBv1JwbiBOavpwJQb3kO4XS:N7/f/MmKAbiIaeJYY7Jpbt1It
TLSH
T1C9468D03B74A9AADC01BC474834686735A76B4CB0B35A9FF55C859383F6AAF04F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jar_mods_injector.exe

File Explorer

jar_mods_injector.exe

.exe 5.4MB

jar_mods_injector.exe

IMPHASH 87a46b9de35304b6d8dfdad750658071
SHA256 0d577d29185c72eec169ea4c0cd171f07815b06d01926ff7de1a3bb896f5bbb5
MD5 4dd6bef74876037046ee8c40a0338bef
SHA1 1dff6dc4065918a4d55249109cca9ee8cf112725
SHA512 26bbeec274f376d90a29fb53ac606e673e0db8ac7a3351e3d6bc4cc22b9c89fb31699a5173e4a8f2ed0ced8bee1b62fac44ed4d790433d84b6169e40e54edc76
SSDEEP 49152:MlZi8lgDOQVi+6+FWcrlMrby+EIY1hYi/Cq2smDK/eBv1JwbiBOavpwJQb3kO4XS:N7/f/MmKAbiIaeJYY7Jpbt1It
TLSH
T1C9468D03B74A9AADC01BC474834686735A76B4CB0B35A9FF55C859383F6AAF04F38359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3032460

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

untitled.pdb

kernel32

FreeLibrary GetProcAddress GetModuleHandleA Sleep CloseHandle SetThreadErrorMode GetLastError LoadLibraryExW GetModuleFileNameW IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentThreadId LoadLibraryW GlobalLock GlobalAlloc SetLastError GlobalUnlock GetCurrentThread GlobalSize WideCharToMultiByte GlobalFree MultiByteToWideChar FormatMessageW GetProcessHeap HeapFree HeapAlloc LoadLibraryA WaitForSingleObject CreateEventW HeapReAlloc lstrlenW GetCurrentProcess WaitForSingleObjectEx GetCurrentProcessId CreateMutexA ReleaseMutex SetFilePointerEx SetFileInformationByHandle SetFileTime DuplicateHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW CreateDirectoryW GetFileInformationByHandleEx SwitchToThread CreateFileW GetOverlappedResult GetFileInformationByHandle DeleteFileW FindFirstFileExW FindClose GetConsoleMode GetModuleHandleW GetFullPathNameW ExitProcess QueryPerformanceFrequency ReadFile CancelIo WriteConsoleW GetStdHandle GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer CreateThread WaitForMultipleObjects ReadFileEx SleepEx GetFileAttributesW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW WriteFileEx GetSystemTimePreciseAsFileTime QueryPerformanceCounter GetExitCodeProcess

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

opengl32

wglMakeCurrent wglShareLists wglGetProcAddress wglGetCurrentDC wglGetCurrentContext wglCreateContext wglDeleteContext

shlwapi

AssocQueryStringW

user32

RedrawWindow PeekMessageW TranslateMessage DispatchMessageW RegisterClassExW CreateWindowExW SetWindowLongPtrW GetWindowLongPtrW DefWindowProcW ChangeDisplaySettingsExW GetWindowPlacement SetWindowPlacement SetWindowPos InvalidateRgn GetClientRect RegisterTouchWindow SetWindowDisplayAffinity GetMenu ScreenToClient MonitorFromRect GetTouchInputInfo CloseTouchInputHandle TrackMouseEvent GetCursorPos MonitorFromWindow GetMonitorInfoW LoadCursorW SetCursor ValidateRect GetClassNameW GetClassInfoExW GetDC ClientToScreen SetCursorPos GetForegroundWindow FlashWindowEx EmptyClipboard IsClipboardFormatAvailable OpenClipboard CloseClipboard GetClipboardData SetClipboardData PostMessageW RegisterClipboardFormatW SetPropW GetPropW CallWindowProcW RemovePropW RegisterWindowMessageA SetCapture ReleaseCapture GetMessageW SetTimer KillTimer DestroyIcon CreateIcon MapVirtualKeyW SendInput SetForegroundWindow GetSystemMenu EnableMenuItem GetWindowTextLengthW GetWindowTextW SetWindowTextW MonitorFromPoint EnumDisplayMonitors GetWindowRect IsIconic GetClipCursor ClipCursor ShowCursor IsProcessDPIAware ShowWindow SetWindowLongW GetWindowLongW AdjustWindowRectEx SystemParametersInfoA GetRawInputData RegisterRawInputDevices GetKeyState ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState GetAsyncKeyState CreateIconFromResourceEx SendMessageW GetSystemMetrics GetActiveWindow ReleaseDC DestroyWindow

shell32

DragFinish DragQueryFileW SHCreateItemFromParsingName

gdi32

SwapBuffers ChoosePixelFormat DescribePixelFormat CreateRectRgn DeleteObject SetPixelFormat GetDeviceCaps

advapi32

ImpersonateAnonymousToken RevertToSelf

ole32

OleInitialize CoCreateInstance RegisterDragDrop CoTaskMemFree CoInitializeEx CoUninitialize RevokeDragDrop

dwmapi

DwmEnableBlurBehindWindow

uiautomationcore

UiaHostProviderFromHwnd UiaGetReservedNotSupportedValue UiaReturnRawElementProvider UiaRaiseAutomationEvent UiaLookupId UiaRaiseAutomationPropertyChangedEvent

oleaut32

SysFreeString SetErrorInfo SysAllocStringLen SysStringLen SafeArrayPutElement SafeArrayCreateVector GetErrorInfo

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmAssociateContextEx ImmGetContext ImmReleaseContext ImmGetCompositionStringW

uxtheme

SetWindowTheme

ntdll

NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError NtWriteFile NtReadFile

vcruntime140

__current_exception_context __current_exception __C_specific_handler _CxxThrowException memmove memset memcpy memcmp __CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-runtime-l1-1-0

_exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argc _set_app_type _seh_filter_exe __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table terminate strerror

api-ms-win-crt-math-l1-1-0

round floorf ceilf trunc expf cos sin ceil sinf powf cosf _hypotf atan2f floor exp2f acosf cbrtf roundf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale