KFC_Menu_Injector[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
KFC_Menu_Injector.exe
Size 604KB
Sample260912-t3a7tscj21
SHA256 5cca9eb8f76bf0866e23b98f47d34aba9bff5cf29251552b92445df8a2e29fc4
MD5 b526da43d9ff083155621320f96a48aa
SHA1 ada2d37ee0bf79ea00845e757110895d669e9536
SHA512 580271d187fbabe3da945865fbc882bf447778d78f0bc05bf7fa214a38d27f90dbba819bbe490c4a7ed75eb2f0f265a6d71e2dbb7bdd21ccd0216ab343f15869
SSDEEP 12288:qs36dyFz84atzebo+oBMwUYOxMOewpiCon8OteXNqGpN:LKIFz8ZFebotBMwtHONpiTn8ts+
TLSH
T15CD4BF86F2F553E8D02781388687EA1BFA353898172059DF33D445692BB77E41BBB321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KFC_Menu_Injector.exe

File Explorer

KFC_Menu_Injector.exe

.exe 604KB

KFC_Menu_Injector.exe

IMPHASH dd35feef2cb3d0ddc757d715f957bffe
SHA256 5cca9eb8f76bf0866e23b98f47d34aba9bff5cf29251552b92445df8a2e29fc4
MD5 b526da43d9ff083155621320f96a48aa
SHA1 ada2d37ee0bf79ea00845e757110895d669e9536
SHA512 580271d187fbabe3da945865fbc882bf447778d78f0bc05bf7fa214a38d27f90dbba819bbe490c4a7ed75eb2f0f265a6d71e2dbb7bdd21ccd0216ab343f15869
SSDEEP 12288:qs36dyFz84atzebo+oBMwUYOxMOewpiCon8OteXNqGpN:LKIFz8ZFebotBMwtHONpiTn8ts+
TLSH
T15CD4BF86F2F553E8D02781388687EA1BFA353898172059DF33D445692BB77E41BBB321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

426240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

user32

SetWindowPos SetProcessDPIAware LoadCursorA ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos TranslateMessage DispatchMessageA PeekMessageA DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow UpdateWindow AdjustWindowRectEx MonitorFromPoint OpenClipboard CloseClipboard SetClipboardData GetClipboardData EmptyClipboard GetKeyboardLayout GetClientRect ReleaseDC GetDC GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent

gdi32

GetDeviceCaps

kernel32

GetFileAttributesExW GetFinalPathNameByHandleW CreateFile2 AreFileApisANSI GetLastError GetModuleHandleW GetFileInformationByHandleEx ReleaseSRWLockExclusive FindFirstFileExW FindFirstFileW FindClose WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetLocaleInfoEx FormatMessageA Sleep GetModuleHandleA OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetProcAddress LoadLibraryA GetLocaleInfoA IsDBCSLeadByte DeleteFileA GetFileAttributesA CloseHandle CreateToolhelp32Snapshot Process32First Process32Next GetVersionExA GetComputerNameA LocalFree InitOnceComplete FindNextFileW GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId AcquireSRWLockExclusive InitializeSListHead InitOnceBeginInitialize

shell32

ShellExecuteW ShellExecuteA

ole32

CoInitialize CoUninitialize

advapi32

RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA GetUserNameA RegCloseKey

msvcp140

_Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z _Thrd_detach ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z

d3dcompiler_47

D3DCompile

urlmon

URLDownloadToFileA URLOpenBlockingStreamA

vcruntime140

__current_exception_context __current_exception __C_specific_handler memcpy memcmp _CxxThrowException __std_exception_destroy __std_exception_copy memset memmove memchr __std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

realloc malloc _set_new_mode free _callnewh

api-ms-win-crt-string-l1-1-0

tolower strcmp strlen strncmp wcslen _stricmp strncpy_s strcpy_s

api-ms-win-crt-stdio-l1-1-0

fclose ftell _wfopen __stdio_common_vsprintf_s fflush __acrt_iob_func fseek __p__commode ungetc fopen fread fwrite __stdio_common_vfprintf __stdio_common_vsprintf fgetc ferror feof __stdio_common_vsscanf _set_fmode

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

ceilf sinf acosf cosf sqrtf fmodf ldexp __setusermatherr powf

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _cexit _register_onexit_function _seh_filter_exe _set_app_type _initialize_onexit_table _get_initial_narrow_environment _initialize_narrow_environment _initterm_e _exit exit __p___argc __p___argv _c_exit _register_thread_local_exe_atexit_callback _configure_narrow_argv terminate abort _beginthreadex _initterm

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale