I<k��ܸ�7�|�<Y��B�.%L����%wr�cN�Qm�O�e�C��*6�w�=%��8�K�B��U5��u��];E�`��l��I �v8���C����"@#T�V�����n5�k_<&rL7���l�Ov�w�6 �"���N�êyJ����L������v6�h��3� d�ft�ؒ��k��C�:JX�����+���:YX���:�&�:}�Q~�ΌfJ����z�'��^�� ��yCܵ�+hz`BƂ%U�W�Z ��`�E?Ŋ�ڮ%�pD#N��|��@��g �R�3o���|���S��a��F�F&�Ϻi�e=G������r��M�T%�u��<bS1��s#:�Q"���ƈ�}��P7���,�L�UQM`��s�u�����B���E�m�����j<{��)�Gh�\���*�����~���M�F(�#���-1�o&�L-��|�6�������%��������y�����w��ջ�V�0��c��7d�9�I��K�'q[E:���5`�u�%��Nm�œ��GVh+��S�T���%�z��_TGP�M�6j,3{7P��-pi�'��ڏT%/�H�������OX��9V�.��g|w�1����1:����z!(ybpnO��� �`E�0(y,ӻ����P�x�x�W��#���5UQA�lX�$Y`y>JՑ~��:��qH,�,(e���l��M�m�-�=0�-^IARb�lk-'܃��:��yoSC��w{�a �ox`#�AE:��[���l;��*|�k�[�����̫B�gFaW-z�IA ��mb' i��Wq���4d�}�Jnŏ)Dh��c��R g���P[C��*�c�W�/h�Sl���[T����'E��u ���@P�)�RS��������a��֜�v�ȧ6Ge" x*M�3�[ ~ �"Q���bю�Z.]�Z�Rk�0����B��`QG�{�UO��@�e���+a6���@U�e���o0���O�����`�{B{*SY���� �Q�1�i���6������&(��[�(����[# p,p4���ˎ[��g���`�g��9e.��b�]�%T��P�b�ö�0ƿ��k� `�6�-������xcM4"�/ 2�f���|���o�V�bh=XZA����ʚ Ȋ���;s2��P��hx�N�@�_B'.���0L&徛��wӉ���%R?S�F�½!��}�9��-w�A��<�/�O��<�m���� 1�'_8�V{rG)���٘�v ��&�:I֖�}����G;�c}a�͝i�Ƀ���A��!�,0� �k� k���g�ކ��^��,����7+��a�:ƕ-g�xR�;�b�~v_{� �z��<;�n�Te�D���{o�B������Yh�a'���n�{�J��6�46}&��K -�(�eQΒP���h@���ct���o�胱���S�*�o�~8�佲d"V��$��8�~˯W2���Q�R�+з�:Zy~���#�!���&����َ�o@��A$�!��7O��\]�5Š^���G^@�}������ y���j�HҎ0z��\-�.�*A(~6EA���;���V#b��Ǖ7�zgT2h������yHwc��a ��鄤��Ǭqy������}�Gq�����bٮ���bT�M����>��L�������lVOe�?����r��ǖ��i���b'/��O�.&�4���`�*�5��%����� 'v��$��m��XC��yx%��8bqwPn��c�BV���a���`w�〓��YZ��˪J����~T����l�x@A��<2S�a�:� �7�� ��ɾ��}o9r.��5�m��Ħ�;Q��by݂1�J����.^�f��%u�x`�]]xg��5-y�7������G�a�L���K���Z�C������������9/��NU�`��P�_g���۪�f�)�d��D�!��P���聽%E�P�:��ũ1t����U�&]���Nႇ�W�|�{�.�J�������0��=�@��z�x"bkj+��ʛ�^���~88��Ў�e��Y�]�X���O�����Rzu�U�H@�,��u^��'$8�"�z��X���Y%��<�?���QK&>��J���"���t1,R�8,U��� �߹�Q�3?�/fΟ���"�%�|$ZF���&b��7�-ܑ�����oL�Ŀ��\r�,�#�+43EY�-�.RI���\���}YQ�� őFݦ\��c��e���ͭH`�3E�&8�mK3,KZ��JF���V��j�)>���i�-�<�#ϳ�茸Ѫ�9$ +��� aE�( [�+���1]��mXw�� G˟���c��eONG5�#���� ���)�A�9δ�����!җ|M�U�gBL�x�V��<~۫eAq����:��_)~nr2�?��z��e�(�S/��-�����;�FOR)��I`F�d\+��\r7������ɏ�v�\؛h���ly]ٿ�b�0���#��A&�W ��1����Y� ?�DG[T��y�Z�MZ#q���C_Q���'ŀ���X�c���?o�?<zȘ��b���b�����8j�2�Cv�� v��WwG�Z�L̓�Q�°�okZ;$}��E�@XHa��}�S8>s�APWB'�n"<��l�*qz2͞T�(`��w~�� L{y�vg����O��s`6�q>kаq�o����u���24��+W���<k���u�< {���C�� ��V���� ye���_rT�0 ��I� 8�V@���?;$�_P��2���ni��g���7��,�1���lq��Q{$4����E+2����PZ���ڃ�����?�>�j����W�T��=1(e1M4�6���rlg�i�$�6TPZ����هޖ��-y�7)�Щm�C�i/�ב��{���Q�j�����0@�ܢ2�� )(!�ID���#o�Ƭ�� �9D��^�J�M��<�R�yn��u�P���O(v { ��\�? ���\�KZe`��v6���)��x&��*ZSl��=���!� c�L�ح=�%�`.�� 7~�Qm���qB��a���HV��saa�s����U�+��^��*�E��Ha3~SՎ;9���y]x��y�s7���CtuYL����x�"|�� '7�+��(��%I�~n,�=a��0���[`T����3b0�N�!u<�)���#_Y�C 9&Í����X�r-Q�);��0�VK�>H�uv 0�2^�z=Q|ȳ,V�,�Q� 6U:ָ�����#�2#;O�6���=E��_�Q�V�)E�ʄ�
Static task
static1
Behavioral task
behavioral1
Sample
FUD_Spoofer.exe
Resource
win7-20220901-en
General
-
Target
FUD_Spoofer.exe
-
Size
7.9MB
-
MD5
17f4923fc3047a6ac19f010232443977
-
SHA1
16715a468fd1198aac720d8526743c7ed6e62107
-
SHA256
5ade964990ed6f7e1fa23d2e3a2efc20c3c9fac664af0f64849ebc2d0760aebd
-
SHA512
013e2f77e24dbcd60e2d5a9d9b9597f4a65daeb80253a1ddd45d210bea80770dfc90894adca6872bc024fee516f798b5e5e14b193a524c16a2a4f72a979f5d93
-
SSDEEP
196608:fEhkz7TxChbgmZO8/eDyxflYqLQZzfbzs2edaVjCg4:Mydqx/eDy5qfEZeWg
Malware Config
Signatures
Files
-
FUD_Spoofer.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 5.6MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 193KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE