fluffy_injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
fluffy_injector.exe
Size 8.5MB
Sample260822-bmcfvazeqa
SHA256 3c4430d5409e1a84bcaea422be8389e1e0197a70a84c6426fe5b8d4326b39e0e
MD5 a8485b925b9bbc0364acdbe7af25d6c0
SHA1 e7aa09660a5d91b5ea0b9ee6725c8398e765fe42
SHA512 7b2148baeae2d5254347fc7dcabb2d33f109ae06e1bb2178ea3bce0ec6cca36ebd92d96ff1542b65ff2e4cd5e2314c84656befaf5e4f99bf81e1c3b8fa576d67
SSDEEP 98304:jmUg7xEaW97LdZSWMh8MeK5Yx4n+5bjjV:jmN72JfyheK56Zp
TLSH
T17B968C42F68799EED55BC47043469633AA2274CB0B3669FF02C496392F76BE01F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fluffy_injector.exe

File Explorer

fluffy_injector.exe

.exe 8.5MB

fluffy_injector.exe

IMPHASH 8cf07bfad69a397a765cd2c3bab749b0
SHA256 3c4430d5409e1a84bcaea422be8389e1e0197a70a84c6426fe5b8d4326b39e0e
MD5 a8485b925b9bbc0364acdbe7af25d6c0
SHA1 e7aa09660a5d91b5ea0b9ee6725c8398e765fe42
SHA512 7b2148baeae2d5254347fc7dcabb2d33f109ae06e1bb2178ea3bce0ec6cca36ebd92d96ff1542b65ff2e4cd5e2314c84656befaf5e4f99bf81e1c3b8fa576d67
SSDEEP 98304:jmUg7xEaW97LdZSWMh8MeK5Yx4n+5bjjV:jmN72JfyheK56Zp
TLSH
T17B968C42F68799EED55BC47043469633AA2274CB0B3669FF02C496392F76BE01F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5476512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

fluffy_injector.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle WakeByAddressAll

kernel32

SetThreadErrorMode GetModuleHandleExW OpenProcess FreeLibrary LoadLibraryExW QueryFullProcessImageNameW LoadLibraryExA HeapFree GetProcessHeap CloseHandle Process32FirstW CreateToolhelp32Snapshot GetProcAddress CreateRemoteThread WaitForSingleObject GetExitCodeThread GetLastError Sleep Process32NextW GetModuleFileNameW GlobalFree FormatMessageW SetLastError GetModuleHandleA InitializeSListHead SetUnhandledExceptionFilter GetSystemTimeAsFileTime CompareStringOrdinal LoadLibraryA SetWaitableTimer CreateWaitableTimerExW GetCurrentThread MultiByteToWideChar WideCharToMultiByte GlobalSize FindNextFileW QueryPerformanceFrequency GetTempPathW IsThreadAFiber FlsSetValue GetModuleHandleW FlsAlloc FlsFree GetFileAttributesW GetConsoleOutputCP GetConsoleMode WriteConsoleW HeapAlloc GetEnvironmentVariableW DeleteFileW ReleaseMutex CreateMutexA WaitForSingleObjectEx SwitchToThread ExitProcess FindClose FindFirstFileExW lstrlenW GetCurrentDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle SetFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WriteFileEx SleepEx ReadFileEx GetCurrentProcessId CreateThread QueryPerformanceCounter HeapReAlloc CopyFileExW DuplicateHandle GetCurrentProcess GetStdHandle CreateFileW SetFileInformationByHandle GetFullPathNameW GetCurrentThreadId LoadLibraryW GlobalLock GlobalAlloc GlobalUnlock FreeEnvironmentStringsW

shell32

SHCreateItemFromParsingName SHGetKnownFolderPath DragQueryFileW ExtractIconExW DragFinish

user32

RedrawWindow PostMessageW DestroyWindow PeekMessageW TranslateMessage DispatchMessageW IsWindowVisible GetActiveWindow GetSystemMetrics SendMessageW CreateIconFromResourceEx GetClientRect GetWindowLongPtrW GetWindowPlacement MonitorFromRect GetClassNameW GetIconInfo GetDC ReleaseDC DestroyIcon GetClassInfoExW ChangeDisplaySettingsExW FlashWindowEx SetCursor LoadCursorW GetWindowRect SetWindowLongPtrW GetMonitorInfoW SetWindowPlacement GetForegroundWindow SetCursorPos InvalidateRgn SetWindowPos DefWindowProcW ClientToScreen CreateWindowExW RegisterClassExW EmptyClipboard SetClipboardData GetClipboardData RegisterClipboardFormatW OpenClipboard CloseClipboard MonitorFromWindow GetCursorPos ReleaseCapture SystemParametersInfoA MonitorFromPoint IsClipboardFormatAvailable EnumDisplayMonitors RegisterRawInputDevices GetKeyboardLayout GetKeyState GetAsyncKeyState GetKeyboardState MapVirtualKeyExW CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent ScreenToClient ValidateRect RegisterTouchWindow SetWindowTextW GetWindowTextW GetWindowTextLengthW SetForegroundWindow SendInput AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW EnableMenuItem GetSystemMenu ShowWindow ShowCursor ClipCursor GetClipCursor IsIconic IsProcessDPIAware CreateIconIndirect CreateIcon GetRawInputData SetWindowDisplayAffinity DestroyCursor MsgWaitForMultipleObjectsEx MapVirtualKeyW SetCapture RegisterWindowMessageA ToUnicodeEx

gdi32

GetDIBits GetObjectW DeleteObject ChoosePixelFormat SetPixelFormat GetDeviceCaps DescribePixelFormat CreateRectRgn SwapBuffers CreateBitmap SetBitmapBits CreateCompatibleBitmap

oleaut32

SysStringLen SysFreeString

ole32

RegisterDragDrop RevokeDragDrop CoCreateInstance OleInitialize CoUninitialize CoInitializeEx

combase

CoTaskMemFree

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

shlwapi

AssocQueryStringW

bcryptprimitives

ProcessPrng

opengl32

wglCreateContext wglMakeCurrent wglGetCurrentDC wglGetProcAddress wglShareLists wglGetCurrentContext wglDeleteContext

advapi32

RevertToSelf ImpersonateAnonymousToken

imm32

ImmAssociateContextEx ImmSetCompositionWindow ImmSetCandidateWindow ImmGetCompositionStringW ImmGetContext ImmReleaseContext

uxtheme

SetWindowTheme

ntdll

NtReadFile NtOpenFile NtWriteFile NtCreateNamedPipeFile RtlNtStatusToDosError

vcruntime140

__CxxFrameHandler3 __current_exception_context memcpy memcmp memset memmove _CxxThrowException __C_specific_handler __current_exception

api-ms-win-crt-math-l1-1-0

expf sinf floorf acosf cbrtf round tanf cbrt cos roundf ceilf fmod truncf fmodf exp2f log2 atan2 floor ceil fma trunc powf _hypot _hypotf atan2f cosf __setusermatherr log sin pow tan

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _crt_atexit _initialize_onexit_table exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _set_app_type _exit strerror _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode