General

  • Target

    Epic_Spoofer.rar

  • Size

    4.2MB

  • MD5

    2671f37a0a89d419a940976cfa014ada

  • SHA1

    bcfa81b00fb7b1dca6b598251d2a097aea40e6e6

  • SHA256

    e18ea329e6a10e6615252fd7f8509ca8a17f6499fad5da68dfeb67f7a5c4745d

  • SHA512

    639c7a20885bb29f9302137858f8b6047d82bf1e665b602b6887772361cf0dc893a26220f178567c902afed671f45e12afb7c9ba6b80cfda470c279addf7f6b3

  • SSDEEP

    98304:PgEdpi+JHsfMIP4OpTiKhvEj/P/778tovU0fCP7RVFZ/JyTVzxNFwlTxTa:JdU+Jw3xvIPz7KoM84H7/ET7nqxm

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Epic_Spoofer.rar
    .rar
  • Epic Spoofer/Epic Spoofer.lnk
    .lnk
  • Epic Spoofer/files/exe and dlls/Epic spoofer.bat
    .bat .vbs
  • Epic Spoofer/files/exe and dlls/applecleaner_2.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Epic Spoofer/files/exe and dlls/injector.exe
    .exe windows:6 windows x64 arch:x64

    41d47768be27a1b9dc153c47ae3e0cb7


    Headers

    Imports

    Sections

  • Epic Spoofer/files/exe and dlls/nova.dll
    .dll windows:6 windows x64 arch:x64

    24f744817903949826d85e3dcad14ba7


    Headers

    Imports

    Sections

  • Epic Spoofer/files/exe and dlls/spoof.sys
    .sys windows:10 windows x64 arch:x64

    9cd3a2254af2c5c16a99addca383bf7f


    Headers

    Imports

    Sections

  • Epic Spoofer/files/exe and dlls/spoofer.exe
    .exe windows:6 windows x64 arch:x64

    c3a4e78895d8e2183e503db5ac8a731c


    Headers

    Imports

    Sections

  • Epic Spoofer/files/novass.ico