HWID_Spoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HWID_Spoofer.exe
Size

417KB
MD5

92e4c2874e685cf069b02e9ce1dea064
SHA1

7a72da53dd931c02db2d4919b43099a8648c5c64
SHA256

0a929b18aa69f297636c39bc04303e3f42908ba8a322bfb1eb7a13f9575885ba
SHA512

caccf9a2c124c9b751b0330552a6eb24f4852341c3aad6f29dd6613d28f9d91784153a65561d4a4297223949f8999a63d425d0538b8ecd81c2bfdae955a16cf0
SSDEEP

3072:w3vRGA/l6rl0T+Ah8UCnI5FGLBkQkk96k0uKXH0sJdeikQkk96k0uKXH0sJdeTTR:MgUc9k35Eo9k35EoUgUcUk35EoOgUcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HWID_Spoofer.exe

Files

HWID_Spoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\GGGG\OneDrive\Área de Trabalho\HWID-Spoofer-main\WindowsFormsApp1\obj\Release\HWID Spoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ