inject_local[.]exe

General

Target
inject_local.exe
Size 147KB
Sample261009-tf3cssgv3m
SHA256 6760e3c163c1ff060607b1a47cae431394e10058573c62d18ab8492781a2c541
MD5 b0cb969cfefec8a503c47924eb9ca03b
SHA1 2e246a7fc2004dad5dc6aea5aacb0e9a511d1ed6
SHA512 353f82626a3d983ac55d1339ee32296fbf9ddaf67c7f3c8d4005478bc629e5bebb40f1893acc38fa45b55d8c380de3f1a6f04d6665e6ea24c0d1c600d5156f55
SSDEEP 3072:1d6HGXeE5EAGZd7t3/DwxcCmvIlbRCfs05RB:uGXeaEAGZdVL7Cmv+VCR
TLSH
T114E36B5773A530F9E1778278C8915A46F7B2B83207209B9F03A447762F236D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
inject_local.exe

File Explorer

inject_local.exe

.exe 147KB

inject_local.exe

IMPHASH d6d4422b5dbade3c3556943056cd8db4
SHA256 6760e3c163c1ff060607b1a47cae431394e10058573c62d18ab8492781a2c541
MD5 b0cb969cfefec8a503c47924eb9ca03b
SHA1 2e246a7fc2004dad5dc6aea5aacb0e9a511d1ed6
SHA512 353f82626a3d983ac55d1339ee32296fbf9ddaf67c7f3c8d4005478bc629e5bebb40f1893acc38fa45b55d8c380de3f1a6f04d6665e6ea24c0d1c600d5156f55
SSDEEP 3072:1d6HGXeE5EAGZd7t3/DwxcCmvIlbRCfs05RB:uGXeaEAGZdVL7Cmv+VCR
TLSH
T114E36B5773A530F9E1778278C8915A46F7B2B83207209B9F03A447762F236D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileA GetFileSize ReadFile CloseHandle GetLastError VirtualAlloc VirtualProtect LocalFree FormatMessageA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW RtlUnwind

Sharing