Static task
static1
Behavioral task
behavioral1
Sample
Jakex-Hwid-Spoofer.exe
Resource
win10-20220812-en
General
-
Target
Jakex-Hwid-Spoofer.exe
-
Size
209KB
-
MD5
35c9de3a50b80f7e18838fb1e776f1cd
-
SHA1
6a8ada7a8f72d7eff64f5aad7b878190e2ee1f0f
-
SHA256
25c45bb52632c377d3b591e53327019e2c51762a984794009758ca3fbc4e2e8c
-
SHA512
9e95edc4da7ae94ad355e6025db064b8cc872a064329bce0ea67a46f8fe7c614f78053690fb4daaee8a3cd8f19bca2316a9b9754d1098384270c36c7916af926
-
SSDEEP
192:eMPguufS7Llq63npTV2RnvcukEeMrMiiiiwe+GTAaQJg/fRmSLFLE8jtHhYSnr/D:ehWpqwSZvc3/wMiiiiROvSBDA
Malware Config
Signatures
Files
-
Jakex-Hwid-Spoofer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ