General

  • Target

    Hwid_Spoofer.exe

  • Size

    6.4MB

  • MD5

    cefd581a70fe5ee215940b4457087e4a

  • SHA1

    9d52d6bc22444b913e7ad3c3c3e00b2dcccb5c68

  • SHA256

    250450bbf9aeb9ae6acd8b459a701da1d5ed3aedd22af55fa6fcbfc73ccc5876

  • SHA512

    5d8204dd08ea71e3826ddd95225dc0a36529e4b74ec221d424acfdb4f9a62312f033e92bc2c61fe23c5d60df517d8a7ce2d54f80f60b500901023ba24b264cf3

  • SSDEEP

    196608:9+wwbc7zI2f5ojEUh6dj3k7MTHotpt2cvRf9h86DHvg:Qzo3Ff2LhiLk7M4R91

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hwid_Spoofer.exe
    .exe windows:6 windows x64 arch:x64

    0624dac67380eec05d3e8766aabfad8c


    Headers

    Imports

    Exports

    Sections