AnarchyInjector_x64 (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AnarchyInjector_x64 (1).exe
Size 91KB
Sample260925-2v3k4sydmc
SHA256 9a14b09639f7296707af6eb5cab03a0f1023ecf3bcce286d47fc6e5f7c0d8765
MD5 c44b5f2c32019eb1d23327ba7eae5a43
SHA1 26c9feee27d3a25eb4109fa0ecb798fadb03a8f7
SHA512 3a4ebce34418fd80e4325da9fa4f749bd8eae9e4b9d41126ce9dcb179c89dca6a213039e43d8dc53f708f508ab929a451cca2b9168c253ef156f3b1e85e93d30
SSDEEP 1536:2vz/yC2lHEzlodbFra54WTd7q8zRAxDTff91xz9uJkedg:dCWEzihFra57dRKDBz9ub
TLSH
T168931B1AEA2650BEC25ACAB8C5430905CB73BC86879663CF53908DDD0F656D1AF3EF41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AnarchyInjector_x64 (1).exe

File Explorer

AnarchyInjector_x64 (1).exe

.exe 91KB

AnarchyInjector_x64 (1).exe

IMPHASH bcfb1685345b087299ebe5b1a367dfc1
SHA256 9a14b09639f7296707af6eb5cab03a0f1023ecf3bcce286d47fc6e5f7c0d8765
MD5 c44b5f2c32019eb1d23327ba7eae5a43
SHA1 26c9feee27d3a25eb4109fa0ecb798fadb03a8f7
SHA512 3a4ebce34418fd80e4325da9fa4f749bd8eae9e4b9d41126ce9dcb179c89dca6a213039e43d8dc53f708f508ab929a451cca2b9168c253ef156f3b1e85e93d30
SSDEEP 1536:2vz/yC2lHEzlodbFra54WTd7q8zRAxDTff91xz9uJkedg:dCWEzihFra57dRKDBz9ub
TLSH
T168931B1AEA2650BEC25ACAB8C5430905CB73BC86879663CF53908DDD0F656D1AF3EF41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\AnarchyInjector\AnarchyInjector\x64\Release\AnarchyInjector_x64.pdb

kernel32

GetCurrentProcess GetStdHandle WaitForSingleObject GetModuleHandleA OpenProcess CreateToolhelp32Snapshot GetExitCodeThread GetLastError Process32NextW LoadLibraryA SetConsoleTitleA CloseHandle LoadLibraryW GetProcAddress VirtualAllocEx ReadProcessMemory GetModuleHandleW CreateRemoteThread VirtualFreeEx FormatMessageA SetConsoleTextAttribute Process32FirstW WriteProcessMemory GetLocaleInfoEx CreateFileW FindClose FindFirstFileW GetFileAttributesExW GetFullPathNameW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte Sleep GetCurrentThreadId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead LocalFree

advapi32

GetTokenInformation OpenProcessToken

msvcp140

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?good@ios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ _Query_perf_frequency ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z _Query_perf_counter ?_Syserror_map@std@@YAPEBDH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Winerror_map@std@@YAHH@Z ?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler __current_exception_context __current_exception memset _CxxThrowException memcmp __std_terminate __std_exception_copy __std_exception_destroy memcpy memmove

api-ms-win-crt-stdio-l1-1-0

fgetpos fsetpos setvbuf ungetc fwrite fread _fseeki64 _get_stream_buffer_pointers fgetc fclose fflush fputc _set_fmode __p__commode

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh free malloc

api-ms-win-crt-string-l1-1-0

isdigit _wcsicmp

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment exit _seh_filter_exe _initterm _initterm_e _exit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv terminate __p___argc __p___argv _c_exit abort _register_thread_local_exe_atexit_callback system _invalid_parameter_noinfo_noreturn _cexit _errno _set_app_type

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-crt-math-l1-1-0

__setusermatherr