spoofer[.]exe | Triage

Sharing

General

Target

spoofer.exe
Size

15.3MB
MD5

5964a31f5f2c64f8ee7abaee0ac3a65e
SHA1

c52bb1668274df052b1c7f10baeeed62c20ea787
SHA256

b6e5cc7b33d3e6053e86d09d76763af2552bd9d8cbad6c52d060a31aab047439
SHA512

3fdae9a9fc80735366b59ce35ca4eca1084e27e7f8eecf405875d6ce6c5e8c142dfc90b8b63a8a4e03f4152b7f3350edb824216238fb9d0cc960840fb7f846f0
SSDEEP

393216:h/Ld4ELgKnC2rKQl2EUGj+350J7CstgBxDw5pZvg5hnJSdAvDge6bu+wyUNZRU+q:h/Ld4ELgKnC2rKQl2EUGj+350J7CstgI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
spoofer.exe

Files

spoofer.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ