injector[.]exe | Triage™

General

Target
injector.exe
Size 168KB
Sample261113-ejdfhsfy8k
SHA256 b618c3247202778a0e215153799fe17003bc2960b42bb9c0e40e5a200321242e
MD5 a36958f23db32b5ff4ec350c31d145b6
SHA1 8b547dc5cf7113379da99c9409a7a7ca4b3b8d6b
SHA512 92f7e3a49133f43f7373fc3c9881a2edcfbcaec79dee5c0e59942fb36589a9d8107a7a7ab7223f2cc5d0349f0667d3e055baa461779aa901f83c216b3ece1c97
SSDEEP 3072:xVMzU79IwaQreIGb505dkol29Y7tHJAf+WAP0:xViOZev5pCJl8
TLSH
T1F4F37C16B6A620FBE237C539C9510A01EB727C624B609ADF47900FB65E276D09F3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
injector.exe

File Explorer

injector.exe

.exe 168KB

injector.exe

IMPHASH 6b8f874ac0920f10a24a7543021b796d
SHA256 b618c3247202778a0e215153799fe17003bc2960b42bb9c0e40e5a200321242e
MD5 a36958f23db32b5ff4ec350c31d145b6
SHA1 8b547dc5cf7113379da99c9409a7a7ca4b3b8d6b
SHA512 92f7e3a49133f43f7373fc3c9881a2edcfbcaec79dee5c0e59942fb36589a9d8107a7a7ab7223f2cc5d0349f0667d3e055baa461779aa901f83c216b3ece1c97
SSDEEP 3072:xVMzU79IwaQreIGb505dkol29Y7tHJAf+WAP0:xViOZev5pCJl8
TLSH
T1F4F37C16B6A620FBE237C539C9510A01EB727C624B609ADF47900FB65E276D09F3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle CreateFileW GetFileAttributesW ReadFile CloseHandle SetHandleInformation GetLastError CreatePipe WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW SetConsoleTitleA WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer WriteFile GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadConsoleW GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc RtlUnwind

Name

.text

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

injector.exe

kernel32

generic