Injector_x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Injector_x64.exe
Size 19KB
Sample261113-113bvsgt2p
SHA256 599dbf3ff47fbce27b9b3699f6695282953a1f12c2bda2fe384df9fb9efd8fe4
MD5 879d7f08d7f3064935d16d0e76af32f8
SHA1 0c66674051b346d5a1f3e7474f9d559f8e4fcd39
SHA512 d16b0ee9eb8e1d95ec60875364322078527d2b96d257391c6332d72a1a675913698366bf713bf7d4dcc22bd204a1f1fecf52c9d06ce8cb84b0b8e9f22d3d4053
SSDEEP 384:dTDw8sQvmTWieb/nYpajjoZuRpg8NJ4FzlqmDXix30SWeZ:9w8sQp/jUZuRQlqoix30Sl
TLSH
T115923A47BFAB08D6E475427985B39509D2F6BD120362ABCF6381815C0FAA3C07DBBB41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Injector_x64.exe

File Explorer

Injector_x64.exe

.exe 19KB

Injector_x64.exe

IMPHASH cfe64f77d3f0bfaa9c18db34a7d73c0b
SHA256 599dbf3ff47fbce27b9b3699f6695282953a1f12c2bda2fe384df9fb9efd8fe4
MD5 879d7f08d7f3064935d16d0e76af32f8
SHA1 0c66674051b346d5a1f3e7474f9d559f8e4fcd39
SHA512 d16b0ee9eb8e1d95ec60875364322078527d2b96d257391c6332d72a1a675913698366bf713bf7d4dcc22bd204a1f1fecf52c9d06ce8cb84b0b8e9f22d3d4053
SSDEEP 384:dTDw8sQvmTWieb/nYpajjoZuRpg8NJ4FzlqmDXix30SWeZ:9w8sQp/jUZuRQlqoix30Sl
TLSH
T115923A47BFAB08D6E475427985B39509D2F6BD120362ABCF6381815C0FAA3C07DBBB41
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7796

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\projects\Injector\x64\Release\Injector.pdb

kernel32

WriteProcessMemory WaitForSingleObject OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle GetProcAddress VirtualAllocEx GetModuleHandleW CreateRemoteThread VirtualFreeEx RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlCaptureContext

msvcp140

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z ?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?good@ios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?widen@?$ctype@_W@std@@QEBA_WD@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?uncaught_exceptions@std@@YAHXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?id@?$ctype@_W@std@@2V0locale@2@A ?_Id_cnt@id@locale@std@@0HA ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception __C_specific_handler __std_terminate __std_exception_destroy _CxxThrowException memset __std_exception_copy memcpy

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit terminate _c_exit __p___argv __p___argc _register_onexit_function _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initialize_onexit_table _set_app_type _seh_filter_exe _register_thread_local_exe_atexit_callback _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale