NativeDllInjector[.]exe

Resubmissions

08/08/2026, 00:17

260808-albx9ayxew

08/08/2026, 00:16

260808-akq1saag343

Sharing

Copy URL Twitter E-mail

General

Target
NativeDllInjector.exe
Size 41KB
Sample260808-akq1saag34
SHA256 e03b2a16355de60dbc3e84eb02b45082e095080abb2396827e4aa08b6ccf62a4
MD5 574e73bb6f3d5691f74b2828a1b4787d
SHA1 ef407850301401ead9e71338c96bb962a603b85f
SHA512 281371b850b00ba005bd53312341f2b7f9ce6492fb45160638a883eba0b6b53208a30a6aa11680cffd79c809c09f9e6a4dfacbd1bc069d27c871a5e8e5031bd1
SSDEEP 768:rKd4ifycXU29ba3ZAxbk9au1miYANXQyOrspweZeURr3lRw:rxM/XUvI2aI5XNpFeUjK
TLSH
T176132946E75900ECE1A3C2F9CAE34E42C3F3B4160762A7CF13A195690F6A2D65D3A912
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NativeDllInjector.exe

File Explorer

NativeDllInjector.exe

.exe 41KB

NativeDllInjector.exe

IMPHASH c93f45d1f163e82d97f020693504aa8e
SHA256 e03b2a16355de60dbc3e84eb02b45082e095080abb2396827e4aa08b6ccf62a4
MD5 574e73bb6f3d5691f74b2828a1b4787d
SHA1 ef407850301401ead9e71338c96bb962a603b85f
SHA512 281371b850b00ba005bd53312341f2b7f9ce6492fb45160638a883eba0b6b53208a30a6aa11680cffd79c809c09f9e6a4dfacbd1bc069d27c871a5e8e5031bd1
SSDEEP 768:rKd4ifycXU29ba3ZAxbk9au1miYANXQyOrspweZeURr3lRw:rxM/XUvI2aI5XNpFeUjK
TLSH
T176132946E75900ECE1A3C2F9CAE34E42C3F3B4160762A7CF13A195690F6A2D65D3A912
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\matvey\Documents\Проекты\NativeDllInjector\x64\Release\NativeDllInjector.pdb

kernel32

WriteProcessMemory OpenProcess CreateToolhelp32Snapshot Sleep GetLastError Process32NextW Process32FirstW CloseHandle GetProcAddress VirtualAllocEx GetModuleHandleW CreateRemoteThread SetConsoleOutputCP VirtualFreeEx GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetLocaleInfoEx FormatMessageA LocalFree WideCharToMultiByte GetFileInformationByHandleEx AreFileApisANSI CreateFile2 GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW FindClose GetCurrentDirectoryW SetUnhandledExceptionFilter InitializeSListHead

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy memset __current_exception_context __current_exception memmove __std_exception_destroy __std_exception_copy __std_terminate memcmp _CxxThrowException __C_specific_handler

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh free malloc

api-ms-win-crt-runtime-l1-1-0

_c_exit _cexit __p___argv __p___argc _register_thread_local_exe_atexit_callback exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _seh_filter_exe _initialize_onexit_table _register_onexit_function abort _crt_atexit system terminate _exit _set_app_type

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-string-l1-1-0

wcslen strlen