C:\Users\Flipper0\Desktop\Zeus-BasicSpooferSource (1)\Spoofer menu test\obj\Debug\ZeusSpooferBase.pdb
Static task
static1
General
-
Target
NLoader.exe
-
Size
25KB
-
MD5
5925c8ab7b5bc2dc7a8d0443ce82cff3
-
SHA1
50378ff1ae5d55da3d9ed0b13d16842afd2d4baa
-
SHA256
1704df42947df7f414d80380dd71e245219add9424fbeb9d61cb43c671ab2608
-
SHA512
d3d1fec44065dac7147b356a1cfe87c9ab597911d04908441ace52a015ced0c1539e30e6e89284980c89f359e9b8a5c9c1ff26d5db140680a81c3061d0e93282
-
SSDEEP
384:aKFb/qM8svj0s7iHMDpykOtoc5tu/sxi3hFW:a4biVoOmc5tu/sxYhY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NLoader.exe
Files
-
NLoader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ