nltXuL57jLYN[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
nltXuL57jLYN.exe
Size 33KB
Sample260925-prn74aeb63
SHA256 f8629c51bb0c97c7848425705b59a8cb887b88225dbcf518228949ce263755df
MD5 ad100e026561d360de921a4baf47fdb7
SHA1 3f3bf64f0824d81006535a72e29999d56ad92030
SHA512 c36acc757b347a353014e6b1a8ad2701773750e0c3e1736d43e4c423b11f8de677480284248f055f9a99330778f4559c34b28811e93ed27e0eeb3c389eafc591
SSDEEP 384:Do9ZbonucNXW/KubqInO05XFIJTnCr31bRGJXRfWaY2RuZoijtBKYkOlCtNRuZoL:c9Z2xNG/Kaq/AItA3dwJJWaYvL96x
TLSH
T118F2C72ADD2BA03BD35D8D74C6534D05DE62BCD78BE1B58FA7400CE60974AA4AB3F601
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nltXuL57jLYN.exe

File Explorer

nltXuL57jLYN.exe

.exe 33KB

nltXuL57jLYN.exe

IMPHASH 5654544fc4c95c8ddbff1c0577ac668b
SHA256 f8629c51bb0c97c7848425705b59a8cb887b88225dbcf518228949ce263755df
MD5 ad100e026561d360de921a4baf47fdb7
SHA1 3f3bf64f0824d81006535a72e29999d56ad92030
SHA512 c36acc757b347a353014e6b1a8ad2701773750e0c3e1736d43e4c423b11f8de677480284248f055f9a99330778f4559c34b28811e93ed27e0eeb3c389eafc591
SSDEEP 384:Do9ZbonucNXW/KubqInO05XFIJTnCr31bRGJXRfWaY2RuZoijtBKYkOlCtNRuZoL:c9Z2xNG/Kaq/AItA3dwJJWaYvL96x
TLSH
T118F2C72ADD2BA03BD35D8D74C6534D05DE62BCD78BE1B58FA7400CE60974AA4AB3F601
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Elon Musk\source\repos\valorant-injector-main\build\hookloader.pdb

kernel32

GetProcAddress GetFileAttributesW SetConsoleScreenBufferSize GetStdHandle SetConsoleWindowInfo LoadLibraryW GetConsoleWindow SetConsoleTitleW LoadLibraryExW RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId RtlLookupFunctionEntry FreeLibrary GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlCaptureContext

user32

SetWindowsHookExW UnhookWindowsHookEx FindWindowW GetWindowThreadProcessId GetWindowLongPtrW SetWindowLongPtrW SetWindowPos PostThreadMessageW

comdlg32

GetOpenFileNameW

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?good@ios_base@std@@QEBA_NXZ ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exceptions@std@@YAHXZ ?_Xout_of_range@std@@YAXPEBD@Z

dbghelp

ImageDirectoryEntryToData

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __current_exception_context __current_exception _CxxThrowException __C_specific_handler memset memcpy __std_exception_destroy __std_terminate memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc _initialize_onexit_table _register_thread_local_exe_atexit_callback _crt_atexit terminate _get_initial_wide_environment exit _c_exit __p___wargv _invoke_watson _exit _initialize_wide_environment _configure_wide_argv _cexit _set_app_type _seh_filter_exe _initterm_e _initterm _register_onexit_function system

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale