InjGen[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
InjGen.exe
Size 35KB
Sample260806-pfr5lsbk21
SHA256 9568f9bc65ab1e1b2dba10649042199c4b12cfdeb9d3fe137c5bf58d154524e4
MD5 c7ff0ac6b6dac5a0b0e0066c59252980
SHA1 6cd5d333cc173807dba2ce54e5dbed41edcf83d6
SHA512 91a3e2ce1fb2bf2392f81b7bc4d5a839185b7fca53d8fa3d229b301413dec93b50836a9a44390b0ebc7f36b4bb1147eae50387a00a6527203d23b7a37feb68a0
SSDEEP 384:BTurCxOQx1n5JbW+JdPwv6VcuGCyptec47H6EHJTqG4ihHy0MTwNGGZRUQOwrF1X:cwWidFyCyDe1XNrBZJrrmZJWG3w8M
TLSH
T1A2F26B1BAB8602F8E17B417EC6776E42E2B17006132167EF03A1C9761E73FE659366C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
InjGen.exe

File Explorer

InjGen.exe

.exe 35KB

InjGen.exe

IMPHASH 1702d24385c152f20632deedec5e4abb
SHA256 9568f9bc65ab1e1b2dba10649042199c4b12cfdeb9d3fe137c5bf58d154524e4
MD5 c7ff0ac6b6dac5a0b0e0066c59252980
SHA1 6cd5d333cc173807dba2ce54e5dbed41edcf83d6
SHA512 91a3e2ce1fb2bf2392f81b7bc4d5a839185b7fca53d8fa3d229b301413dec93b50836a9a44390b0ebc7f36b4bb1147eae50387a00a6527203d23b7a37feb68a0
SSDEEP 384:BTurCxOQx1n5JbW+JdPwv6VcuGCyptec47H6EHJTqG4ihHy0MTwNGGZRUQOwrF1X:cwWidFyCyDe1XNrBZJrrmZJWG3w8M
TLSH
T1A2F26B1BAB8602F8E17B417EC6776E42E2B17006132167EF03A1C9761E73FE659366C1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\DoomsDayDetector-main\x64\Release\InjGen.pdb

kernel32

K32GetModuleFileNameExW K32EnumProcesses K32EnumProcessModules GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetModuleHandleW QueryPerformanceCounter

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?good@ios_base@std@@QEBA_NXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr memcmp memset __current_exception_context _CxxThrowException __C_specific_handler memmove wcsstr __std_terminate __std_exception_copy __std_exception_destroy memcpy __current_exception

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func _set_fmode __p__commode __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function __p___argc _cexit _exit _c_exit _initterm exit __p___argv _register_thread_local_exe_atexit_callback _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _set_app_type _seh_filter_exe _initterm_e _crt_atexit system _invalid_parameter_noinfo_noreturn

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale