Static task
static1
Behavioral task
behavioral1
Sample
Hwid Spoofer free.exe
Resource
win7-20230220-en
General
-
Target
Hwid Spoofer free.exe
-
Size
532KB
-
MD5
acf2e7234132d7154ffb9142e103dae4
-
SHA1
cd9ddca1c989c9a0f6d7d9154ad2e49c92ad85a4
-
SHA256
119bb7859fc07b7d6ba9dfb73438ef68a3039d6d0ca0bf35a5251a3aeea5d7d0
-
SHA512
c2219ff9fd73dd5b7c5015303e0ccb545d9006cd51b884327beb1d3071695d240cf5bbe2a49eb24684687fdbbc5fc1395ddc843d8290307c5f5753ec2876dc54
-
SSDEEP
12288:rim7EjNe/NcuR9JmNGRTz+lUT6IqnT2Q4Xib7XDuLXH4:r97lRPJmchJeTeSnXDuLXY
Malware Config
Signatures
Files
-
Hwid Spoofer free.exe.exe windows x86
991f094cb529d13e449d288b2a715927
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
user32
CharLowerW
advapi32
RegCloseKey
Sections
.adata Size: - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 529KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE