Static task
static1
Behavioral task
behavioral1
Sample
Spoofer.exe
Resource
win7-20231215-en
General
-
Target
Spoofer.exe
-
Size
8.8MB
-
MD5
6871a3696eb5a4d27bc7cb6fedd4cfae
-
SHA1
262b7b693aa22e2300c389bbde5cf6966012fd26
-
SHA256
ec28b4aef6b5a01a46e533c6123f4e2350dd6b7da1a49d89bca8f5f689986861
-
SHA512
3f80119c379fda629d871192ae650743955027bda79bf2f1283b0b5939c19ba30a39dce6edbd8d4dab041a185b01c03399740a7fdfce616ca42809844116e92a
-
SSDEEP
196608:01oqgZ0aqGc9yBPj40ol/djk13wa/RL+FILWcC8r5hcNc:YrOsGc9yBPEvl/xa3tobwns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Spoofer.exe
Files
-
Spoofer.exe.exe windows:6 windows x64 arch:x64
2ae91660c01f3a178cd3dcfce394f6aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
advapi32
GetUserNameA
shell32
PathMakeUniqueName
user32
ReleaseDC
Sections
Size: - Virtual size: 959KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE