injector[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
injector.exe
Size 20KB
Sample260818-pg7xfssapf
SHA256 b2bfc11f8596084d3bd9d03f5729f585732fa93df404dd58915bd9d914558170
MD5 789cb24adf95d0a249a24171f48d573a
SHA1 0907fcdd8ae3ad88125485ceb71b38b88ca31ed5
SHA512 b109d4cd22338679e5656c1001d4639155bcc0aa9461a8b5b518d6973e282e4dfcee0b6807c9bbc5847f90ef0b05d7f542c149b41684bc933347ae48e63510e2
SSDEEP 384:F02ZhzWSsXirbaOYBJT/sqAK6FvBWZpI5t7x87j0:q2uurbW+KCBqIT7K
TLSH
T1DD926D4AFE054E73EA7001F8157E563AC97B36323B1991EBFF694A9601682D4BC3811F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector.exe

File Explorer

injector.exe

.exe 20KB

injector.exe

IMPHASH 1065cf719c5115dda514d1bce6e99f0d
SHA256 b2bfc11f8596084d3bd9d03f5729f585732fa93df404dd58915bd9d914558170
MD5 789cb24adf95d0a249a24171f48d573a
SHA1 0907fcdd8ae3ad88125485ceb71b38b88ca31ed5
SHA512 b109d4cd22338679e5656c1001d4639155bcc0aa9461a8b5b518d6973e282e4dfcee0b6807c9bbc5847f90ef0b05d7f542c149b41684bc933347ae48e63510e2
SSDEEP 384:F02ZhzWSsXirbaOYBJT/sqAK6FvBWZpI5t7x87j0:q2uurbW+KCBqIT7K
TLSH
T1DD926D4AFE054E73EA7001F8157E563AC97B36323B1991EBFF694A9601682D4BC3811F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree SetConsoleTitleA WriteFile GetProcessId FindNextFileA GetEnvironmentVariableA FindClose WaitForSingleObject GetSystemDirectoryW GetCurrentDirectoryA GetModuleHandleA OpenProcess GetCommandLineA CreateToolhelp32Snapshot GetExitCodeThread Sleep GetFileAttributesA Process32NextW CreateFileA DeleteFileA Process32FirstW FindFirstFileA LoadLibraryW HeapAlloc SetFileAttributesA Module32FirstW VirtualProtectEx GetProcAddress VirtualAllocEx GetFileSize lstrcpynA SetEnvironmentVariableA GetProcessHeap GetModuleHandleW FreeLibrary CreateRemoteThread Module32NextW CreateProcessA VirtualFreeEx LoadLibraryExW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime WriteProcessMemory GetModuleFileNameA CloseHandle ReadFile InitializeSListHead SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter

user32

MessageBoxA

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

vcruntime140

_except_handler4_common __current_exception_context strstr memset __current_exception strchr strrchr memcpy

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vsprintf fgets _set_fmode puts __stdio_common_vfprintf __acrt_iob_func

api-ms-win-crt-string-l1-1-0

strcat_s wcscat_s _wcsicmp _stricmp _strnicmp strcpy_s

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-runtime-l1-1-0

_initterm _get_initial_narrow_environment _initialize_narrow_environment _set_app_type _exit _configure_narrow_argv __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _seh_filter_exe exit _initterm_e _initialize_onexit_table _register_onexit_function _crt_atexit _controlfp_s terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode