inyector.rar
- SHA256 22140960970089d96c6d440661d46020c943c8f41136e8755cd5504cc17def2b
Behavioral task
behavioral1
Sample
Inyector.dll
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
600 seconds
Behavioral task
behavioral2
Sample
Mimi Inyector.exe
Resource
win11-20260513-en
windows11-21h2-x64
12 signatures
600 seconds
General
- Target inyector.rar
- Size 31.5MB
- Sample260807-ebs61azvhv
- SHA256 22140960970089d96c6d440661d46020c943c8f41136e8755cd5504cc17def2b
- MD5 cf77f709c6916c976fe724f4c28ac383
- SHA1 28bacbd7dc53f4d27134b4f521b489e1670f8f88
- SHA512 30a9085b5fbc85ea9e02738416fc8e3cb7abca0e1ba0dd062a8513f734474dbd62c45b4ad7c5710798e12bc3019976759fb7b46f38884c57d397fa4ae37845d2
- SSDEEP 786432:xi4413YIVxxfyIdbt2UR6tm2YsnaU1Jvy/Xw4IkR:04413YOxJRb5R6tmonaU1Jvmwz8
- TLSH T105773359E2B0605F369987A63185DD3CF813AB464BECE45EB93F9D1030EC5A0AF0A4D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/Mimi Inyector.exe pyinstaller - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Inyector.dll unpack001/Mimi Inyector.exe
File Explorer
-
inyector.rar.rar 31.5MB
-
Inyector.dll.dll 16KB
-
Mimi Inyector.exe.exe 31.7MB
-
diseno.pyc8KB
Inyector.dll
- IMPHASH e7cd0782d553fe4986a7c6e949a2dad3
- SHA256 1a241ee06a1fca60dcd70b31f3d0e635e8cb84a41142af9bf4b170ad44021cd8
- MD5 111d9156724111721be395f8b5a01164
- SHA1 7332fa8d42a831c9307c2fb8c89022ba9fbf35f7
- SHA512 3f8bd46866b9c535c963556d87909107f73a27b34bdc414fb5fc94758e33e5e5cbe7745d89b87c0457826f5c361d21670584f23e78c6faece32dadf2882928cc
- SSDEEP 384:3jzFZxhNJmj5QV1Hq7k45ehtx0Ku1NdDWxDqdjP6:3ZPMjeK7khhIBWxej
- TLSH T1AA723B01F78245F3F6A911B01C35DA56C6BCB9385FF26A87BB828A0A0D641D1FD31B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8749
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\A3rr0r\Desktop\MimiInyector\Release\MimiInyector.pdb
kernel32
WriteProcessMemory
WriteFile
WaitForSingleObject
CreateFileW
OpenProcess
CreateToolhelp32Snapshot
GetLastError
Process32NextW
Process32FirstW
CloseHandle
GetProcAddress
VirtualAllocEx
GetModuleHandleW
CreateRemoteThread
VirtualFreeEx
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
shell32
SHGetFolderPathW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__CxxFrameHandler3
memcpy
_except_handler4_common
memmove
memset
__std_exception_copy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-time-l1-1-0
_localtime64_s
_time64
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
Inject
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
676B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=259, version=35207,
count=10, id=260, version=35207,
count=16, id=261, version=35207,
count=4, id=257, version=35207,
count=5, id=257, version=33145,
count=62, id=1, productName=Unmarked objects,
count=1, id=265, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Mimi Inyector.exe
- IMPHASH 5939410b96773d14b36f2ddd9c7141f3
- SHA256 96ea26c4795339d28db098080b6feed1cf4ccc8706a99a9d86a9d801c437716f
- MD5 0b834cc289a5f9bbf46cbb6c33cef919
- SHA1 1e97c64e52a249b64ec2c1b85edcd11eb0090b8b
- SHA512 275c1b159d845bdc9d4b6552308fcd786270b88b624d19768cb510000b421564eb227d4ca692f3308f48fcf2b22d6da204e110a53f58e604239c999772678bad
- SSDEEP 786432:7aF8WWxUdDd1LRphkc7Fphj5WGlso5EYWkPMU1VL7ttYnAd4f:7aF8WWxUDddRnFphj5Zd5E/U1l7wnA
- TLSH T1F97733A4CDF089BAC832007B2DB0EE41C33ED5A95553D91BC776846BF5937E9A06122F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
52320
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongW
GetWindowLongW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
InitializeCriticalSectionEx
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
CreateSymbolicLinkW
GetEnvironmentStringsW
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
FlsFree
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
DecodePointer
SetErrorMode
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=33140,
count=183, id=261, version=33140,
count=19, id=260, version=33140,
count=3, id=253, version=35207,
count=20, id=259, version=35207,
count=18, id=260, version=35207,
count=38, id=261, version=35207,
count=11, id=257, version=33140,
count=155, id=1, productName=Unmarked objects,
count=27, id=260, version=35213,
count=1, id=258, version=35213,
diseno.pyc
- SHA256 266ad034a4075377132be75d5dacc9546d13e7f5fa5a4b7ffc48a63245815228
- MD5 b831d43980a24eac2346b7970d0cee05
- SHA1 febb14191eeb63d1aa990ab36132eab6a3f72b05
- SHA512 155f0e01c2d8fca400ed9a112962f50d647478006d669e2c6bad271f985fd240c7cbb17aea831ea2be4d3aef69f0f39a287a737bd26145231095096e40b3956a
- SSDEEP 192:P0OlQN8dVOW824mFUAVQfkqsXHiKUQwG8Oo0gnSl777777777777777777l8q:P0hN8dVqAVzfXiKmG8Oo0gnzq
- TLSH T1390250846B07CA7FF989A776A81A6317F790C2F2F610DB17325E902ADF623202C555CD
- MD5 SHA1 SHA512 SSDEEP TLSH