injector[.]exe | Triage™

General

Target
injector.exe
Size 173KB
Sample261002-sncaxatarb
SHA256 db92a90d579c7165e1748192bf3c4d9548b1f5ea37408c36d0c9459fb414a086
MD5 3862c6cca3e8da753f764e62330853a8
SHA1 1524eddf8553d00f8845695611010c094dbd0525
SHA512 aae1ba9f1b5b642ddaf1bf6c18edb16367d8ea9f4f10243fa84b01623b01ce9de45c174f5c4ec9ade69e4b3929f93e5ef9b4cba4437609626c544b668ff0355b
SSDEEP 3072:K9BlfvwH9hRxJPDU5iQaUB49fmxxAfc58pQaOq1qxYm2S1:K9BlfvwHWKUBg5fY8jK1
TLSH
T1C9046C15F7A950FBE2778538C9521901EB72BC524760AADF07900BF69E237D48E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector.exe

File Explorer

injector.exe

.exe 173KB

injector.exe

IMPHASH d96da575bbb90f79960abfc79188cf80
SHA256 db92a90d579c7165e1748192bf3c4d9548b1f5ea37408c36d0c9459fb414a086
MD5 3862c6cca3e8da753f764e62330853a8
SHA1 1524eddf8553d00f8845695611010c094dbd0525
SHA512 aae1ba9f1b5b642ddaf1bf6c18edb16367d8ea9f4f10243fa84b01623b01ce9de45c174f5c4ec9ade69e4b3929f93e5ef9b4cba4437609626c544b668ff0355b
SSDEEP 3072:K9BlfvwH9hRxJPDU5iQaUB49fmxxAfc58pQaOq1qxYm2S1:K9BlfvwHWKUBg5fY8jK1
TLSH
T1C9046C15F7A950FBE2778538C9521901EB72BC524760AADF07900BF69E237D48E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

14992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject Sleep CreateRemoteThread GetExitCodeThread OpenProcess VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleFileNameW GetModuleHandleW GetProcAddress SetConsoleOutputCP CreateToolhelp32Snapshot Process32FirstW Process32NextW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW WriteConsoleW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetConsoleCP GetStdHandle WriteFile GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc WideCharToMultiByte CreateFileW GetConsoleMode SetConsoleMode ReadConsoleInputW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetFileType FlushFileBuffers GetConsoleOutputCP FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc

Name

.text

Size

103KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

injector.exe

kernel32

generic