Static task
static1
Behavioral task
behavioral1
Sample
Spoofer.exe
Resource
win7-20230220-en
General
-
Target
Spoofer.exe
-
Size
516KB
-
MD5
1f761723d14352e9842b7a1461e39bb7
-
SHA1
217c3cf35b70cdcaad6db03f5dd42e35584baa6e
-
SHA256
7262880c9844e065ad7abbe7cbcb5fd98007724e959ac8ed46729dbe2aa034b1
-
SHA512
b91454b9f3035ad2bce3da5d0d76f1bc7c0faf2ab0bf6ca0545463e9b164c4d98df115c0adf75d3811731e9a41265b135fce0a7cdf9daaca6286768a9c01ab3e
-
SSDEEP
12288:X64KSX4GVPxTVRm8rJrVw32HRZ4HFDPZzgr:X6DSXzppIEh632xuHxZUr
Malware Config
Signatures
Files
-
Spoofer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.#~a Size: - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.@KZ Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x%q Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ