StealthInject[.]exe

General

Target
StealthInject.exe
Size 82KB
Sample260919-t1985stbkh
SHA256 ad414bb930e862469a8a7682d0f06738614e68dc1bcbff04d60636c5af919ae9
MD5 d3aa06f5eac36058f34803f249e2d9d3
SHA1 8edaa5a570e12d50f0bff3befc764b83d79ab0df
SHA512 507b7f3df58679f5ae61d2fb19d9776bb2a4b31849241122a4ba18dc5bb8bf11584065b997cbd8950dbe774b9daad766310b1626c480e92099ee32ecf8ff3756
SSDEEP 1536:8sGDlZtNx5N471AEGEJNj1U0CZPC2GzDLzcxHG9sWjcd5XwKN:ij5RJ3PNHx5XTN
TLSH
T105837C12B6D0C4B1D5B3063149ACCB614A7EFD366E759DA7B388120F5E781C0AA36B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
StealthInject.exe

File Explorer

StealthInject.exe

.exe 82KB

StealthInject.exe

IMPHASH d5bf62bc74471ed2fe5885eb75938a2b
SHA256 ad414bb930e862469a8a7682d0f06738614e68dc1bcbff04d60636c5af919ae9
MD5 d3aa06f5eac36058f34803f249e2d9d3
SHA1 8edaa5a570e12d50f0bff3befc764b83d79ab0df
SHA512 507b7f3df58679f5ae61d2fb19d9776bb2a4b31849241122a4ba18dc5bb8bf11584065b997cbd8950dbe774b9daad766310b1626c480e92099ee32ecf8ff3756
SSDEEP 1536:8sGDlZtNx5N471AEGEJNj1U0CZPC2GzDLzcxHG9sWjcd5XwKN:ij5RJ3PNHx5XTN
TLSH
T105837C12B6D0C4B1D5B3063149ACCB614A7EFD366E759DA7B388120F5E781C0AA36B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\frans\Downloads\StealthInject-master\bin\x86\Release\StealthInject.pdb

kernel32

CreateFileA GetFileSize HeapAlloc HeapFree Process32First WaitForSingleObject GetProcessHeap CreateRemoteThread OpenProcess VirtualFreeEx Sleep ReadProcessMemory ReadFile FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx LoadLibraryA Process32Next GetExitCodeThread GetModuleHandleA CreateToolhelp32Snapshot CloseHandle WriteProcessMemory IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW RaiseException GetCurrentThreadId ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetModuleFileNameA WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleCP GetConsoleMode SetFilePointerEx IsValidCodePage GetACP GetOEMCP GetCPInfo RtlUnwind LoadLibraryExW OutputDebugStringW SetStdHandle WriteConsoleW GetStringTypeW HeapReAlloc FlushFileBuffers HeapSize LCMapStringW CreateFileW

Sharing