Static task
static1
General
-
Target
1337 Spoofer.exe
-
Size
183KB
-
MD5
e7321fb08a6963432b8a52939847feb3
-
SHA1
03c126d1ce5627be593d9c60a5f6004027b6bb31
-
SHA256
70ea9f3144d430c6daeb19140aec4ef773ee9349e7afd3b3715543a4692791ea
-
SHA512
df0cc79042f0ea73a7ed96aeabe002c6133cee74515a8a0695b3f12a6208d741ba2188c21af717fd299f5816d2bb63eed6d86f10cad28f95b5d459072301d273
-
SSDEEP
3072:oSGIXiG340fwYfIX+tk5fOCuS7AyBS9x6e6ffWvJmiFy+FLzb:oSGIXiG340fwYfIX+O5fOS7AykWfWjF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1337 Spoofer.exe
Files
-
1337 Spoofer.exe.exe windows x64
Password: infected
04a8eae62645da570a87a41ea8dec1b8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetConsoleTextAttribute
SetConsoleTitleA
GetStdHandle
Sleep
GetConsoleWindow
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
CloseHandle
GetLastError
GetModuleHandleW
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
LocalFree
user32
GetWindowLongA
ShowWindow
GetSystemMetrics
SetWindowPos
SetWindowLongA
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?good@ios_base@std@@QEBA_NXZ
_Query_perf_frequency
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
__C_specific_handler
memcpy
__std_terminate
_CxxThrowException
__current_exception
memset
__current_exception_context
__std_exception_destroy
memmove
api-ms-win-crt-runtime-l1-1-0
_exit
__p___argc
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_c_exit
_cexit
_set_app_type
_seh_filter_exe
__p___argv
_initterm
terminate
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_crt_atexit
exit
_register_onexit_function
system
_initialize_onexit_table
_initterm_e
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-heap-l1-1-0
free
_callnewh
_set_new_mode
malloc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ