C:\Users\caido\Desktop\GithubSpoofer-V2\obj\Debug\MoonwareFree.pdb
Overview
overview
3Static
static
3GithubSpoo...in.vbs
windows7-x64
1GithubSpoo...in.vbs
windows10-2004-x64
1GithubSpoo...ED.exe
windows7-x64
1GithubSpoo...ED.exe
windows10-2004-x64
1GithubSpoo...ee.exe
windows7-x64
1GithubSpoo...ee.exe
windows10-2004-x64
1GithubSpoo...ee.exe
windows7-x64
1GithubSpoo...ee.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
GithubSpoofer-V2/Forms/Login.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
GithubSpoofer-V2/Forms/Login.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
GithubSpoofer-V2/bin/Debug/VaultUPDATED.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
GithubSpoofer-V2/bin/Debug/VaultUPDATED.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
GithubSpoofer-V2/bin/Release/MoonwareFree.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
GithubSpoofer-V2/bin/Release/MoonwareFree.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
GithubSpoofer-V2/obj/Debug/MoonwareFree.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
GithubSpoofer-V2/obj/Debug/MoonwareFree.exe
Resource
win10v2004-20231222-en
General
-
Target
GithubSpoofer-V2.rar
-
Size
129KB
-
MD5
fee98c15185ddfc031e18163dd486bf6
-
SHA1
0b54a4535c936d49ae9f4d3253c022ef93da1251
-
SHA256
d0ee73cbf6ee0984f829c6d889124239bdd97a471e7d36de0be830502591c41d
-
SHA512
ac34549ddbb54f23dfd21c7a0238c3ca021b46c15359e4308270f75756c105137e6315b418e39c036130d450c34de0ce359bff6b51c1186557a1e09e4eb1ad4b
-
SSDEEP
3072:nN1mBudwNbOaxy1VqUmq3jO3yvs1/Fg4COwaQUbWOCfP:nHmBn8qUmqTO7/hCOwG1C3
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/GithubSpoofer-V2/bin/Debug/VaultUPDATED.exe unpack001/GithubSpoofer-V2/bin/Release/MoonwareFree.exe unpack001/GithubSpoofer-V2/obj/Debug/MoonwareFree.exe
Files
-
GithubSpoofer-V2.rar.rar
Password: 123
-
GithubSpoofer-V2.sln
-
GithubSpoofer-V2/App.config
-
GithubSpoofer-V2/Appearance.cs
-
GithubSpoofer-V2/Forms/Login.Designer.cs
-
GithubSpoofer-V2/Forms/Login.cs
-
GithubSpoofer-V2/Forms/Login.resx.vbs
-
GithubSpoofer-V2/GithubSpoofer-V2.csproj
-
GithubSpoofer-V2/Program.cs
-
GithubSpoofer-V2/Properties/AssemblyInfo.cs
-
GithubSpoofer-V2/app.manifest
-
GithubSpoofer-V2/app1.manifest
-
GithubSpoofer-V2/bin/Debug/MoonwareFree.exe.config
-
GithubSpoofer-V2/bin/Debug/MoonwareFree.pdb
-
GithubSpoofer-V2/bin/Debug/PLASMA FREE TEMP.config
-
GithubSpoofer-V2/bin/Debug/VaultUPDATED.exe.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
GithubSpoofer-V2/bin/Debug/VaultUPDATED.rar.rar
Password: 123
-
GithubSpoofer-V2/bin/Release/MoonwareFree.exe.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\ADMIN\Desktop\Updated-Spoofer-main\GithubSpoofer-V2\obj\Release\MoonwareFree.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
GithubSpoofer-V2/obj/Debug/.NETFramework,Version=v4.7.2.AssemblyAttributes.cs
-
GithubSpoofer-V2/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
GithubSpoofer-V2/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
GithubSpoofer-V2/obj/Debug/GithubSpoofer-V2.csproj.AssemblyReference.cache
-
GithubSpoofer-V2/obj/Debug/GithubSpoofer-V2.csproj.CoreCompileInputs.cache
-
GithubSpoofer-V2/obj/Debug/GithubSpoofer-V2.csproj.FileListAbsolute.txt
-
GithubSpoofer-V2/obj/Debug/GithubSpoofer-V2.csproj.GenerateResource.cache
-
GithubSpoofer-V2/obj/Debug/GithubSpoofer_V2.Forms.Login.resources
-
GithubSpoofer-V2/obj/Debug/MoonwareFree.exe.exe windows:4 windows x86 arch:x86
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\caido\Desktop\GithubSpoofer-V2\obj\Debug\MoonwareFree.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
GithubSpoofer-V2/obj/Debug/MoonwareFree.pdb