Static task
static1
Behavioral task
behavioral1
Sample
Sky Spoofer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Sky Spoofer.exe
Resource
win10v2004-20230220-en
General
-
Target
Sky Spoofer.exe
-
Size
4.1MB
-
MD5
175554e793cc41cd94035f667863990a
-
SHA1
26305db9b98e965e3ce93e414ecd98849c90dc63
-
SHA256
81bd9a43d2ea9ae0e096a9be03a69ec5612e6b8c60440b4cf3204fec5308bc55
-
SHA512
b04fd6975b36aee2adad5e0387a4bffc296df3995a0c5ae7e537ef4fc7bd8a5c446ef13b2a94ba39265b69f2e8fcbbd73a3fd912f34309a1c44698c6a18a8154
-
SSDEEP
98304:iN4N7kjYv4MZhA3tXvtDijAks3w0gx1zTzHD7H4NG/zCkG:iqNfv4MZhAdXvtDse3w0gzQG/zCkG
Malware Config
Signatures
Files
-
Sky Spoofer.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 2.8MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 196KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1007KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE