The Injector exe File Malware Analysis
Gridinsoft Logo

The Injector.exe File Analysis

Updated 24 days ago
Checked by Malware Check
Injector.exe

Technical Analysis

File Name Injector.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64, for MS Windows
SSDEEP Hash
1536:VcrErfthc8xE4B22EMZ9tzyQ+HufV0TEG94O:3/jZfZ9JynOY9l
Scanner Version 1.0.222.174
Database Version 2025-08-04 14:00:40 UTC
⚠

Suspicious File Detected

Detected by 37 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
51%
Detection Rate
89,088
File Size (bytes)
37/72
Engines Detected
2025-08-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bff6a91e5a9d65fe7576cb074c97ef56
SHA1
2be336a6d1f23f60c9f04dc2ad8b590bfda64925
SHA256
9ad4bcf124597c43d10df5ac286773665ac2b4adca389aaa4aa8129d3018553b
SHA512
3a0e1648588270f3e54a75673fc9321c6891c004a78cf63be2311e81b0f7041b8f4b81735f044aacdb7b73f29e29510f2dd3a29faeb6b85cf2a54340448d178f
ImpHash
ed602c917e5887f6112b0a20137d4543

Security Engines with Detections (37 of 72)

Skyhigh
BehavesLike.Win64.Generic.mh Malicious
ALYac
Gen:Variant.Tedy.784361 Malicious
Cylance
Unsafe Malicious
K7AntiVirus
Trojan ( 005cae7d1 ) Malicious
Alibaba
Trojan:Win64/ShellcodeRunner.adc4dc11 Malicious
K7GW
Trojan ( 005cae7d1 ) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
Elastic
malicious (moderate confidence) Malicious
ESET-NOD32
a variant of Win64/ShellcodeRunner.BCE Malicious
BitDefender
Gen:Variant.Tedy.784361 Malicious
MicroWorld-eScan
Gen:Variant.Tedy.784361 Malicious
Rising
Malware.Undefined!8.C (TFE:5:h4OGf0NEXiB) Malicious
Emsisoft
Gen:Variant.Tedy.784361 (B) Malicious
F-Secure
Trojan.TR/Redcap.ynucc Malicious
VIPRE
Gen:Variant.Tedy.784361 Malicious
McAfeeD
Trojan:Win/GenericY.ECI Malicious
CTX
exe.trojan.shellcoderunner Malicious
Sophos
Mal/Generic-S Malicious
GData
Gen:Variant.Tedy.784361 Malicious
Webroot
Win.Malware.Gen Malicious
Google
Detected Malicious
Avira
TR/Redcap.ynucc Malicious
Arcabit
Trojan.Tedy.DBF7E9 Malicious
Microsoft
Trojan:Win32/Wacatac.B!ml Malicious
Varist
W64/ABRisk.SWFQ-1777 Malicious
AhnLab-V3
Malware/Win.Generic.C5780513 Malicious
DeepInstinct
MALICIOUS Malicious
Malwarebytes
Generic.Malware/Suspicious Malicious
Ikarus
Trojan.Win64.Shellcoderunner Malicious
Panda
Trj/Chgt.AD Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09H225 Malicious
Tencent
Malware.Win32.Gencirc.11e18cd0 Malicious
TrellixENS
Artemis!BFF6A91E5A9D Malicious
Fortinet
W64/ShellcodeRunner.BCE!tr Malicious
AVG
Win64:MalwareX-gen [Misc] Malicious
Avast
Win64:MalwareX-gen [Misc] Malicious
alibabacloud
Trojan:Win/ShellcodeRunner.BWM Malicious
35 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x14000c330
Compilation Time 2025-08-02 01:11:07
Checksum 0x00000000 (Actual: 0x00024d10)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\Users\ardap\source\repos\LX63Injector\x64\Release\LX63Injector.pdb
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 0 functions
Resources 1 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 50,787 bytes 51,200 bytes 6.18 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9235A126CF03CBFCE1734ACAF6602600
.rdata 0x0000e000 32,228 bytes 32,256 bytes 5.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B07E36CE549E15F46F155353043562F2
.data 0x00016000 2,632 bytes 1,024 bytes 3.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6040269C6910D16B2754B4EBB1EB40F2
.pdata 0x00017000 2,112 bytes 2,560 bytes 4.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F4EF1C4434B717C2AC54E4CF707BFF9F
.rsrc 0x00018000 480 bytes 512 bytes 4.70 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9124B0CEC9B7677B6C6AFA99416F02A3
.reloc 0x00019000 212 bytes 512 bytes 2.66 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A786C1EF7A7154442D58D4B10D1DFE72

Resource Analysis

▼
Total Resources: 1 (381 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 381 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
37 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware