Grey_Spoofer_-_CrackedBySkills[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Grey_Spoofer_-_CrackedBySkills.exe
Size

5.6MB
MD5

44a9fe31eed72dc9c7721bf3038031f1
SHA1

360eb47696e969a918d06cb04bad3e9f2aedc07f
SHA256

2be814266ecf3d2f02df06463fe29a860dab81af00f7bd1e585f551691944de8
SHA512

99fc3da1dbdbacca2cad86e25e94c79b7395737726077c9b157d74cecc4297c035d347a178ff5c8c541402812e49d1d36732a0461d2405ed1233fe51cfce19d8
SSDEEP

98304:vUrEuQ2oBKdI24IxQuStSEb4Q+KH4kpc+DX/0HBKmq9LAWoB0B:srs2DK24yQuvlDKYODU2Mx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Grey_Spoofer_-_CrackedBySkills.exe

Files

Grey_Spoofer_-_CrackedBySkills.exe
.exe windows x86

04b15336528ce9d078bec91d253e5782

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

RegOpenKeyExA

shell32

ShellAboutW

mscoree

_CorExeMain

comctl32

InitCommonControlsEx

Sections

Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ