YIZUZSPOOFER[.]RAR

General

Target
YIZUZSPOOFER.RAR
Size 60KB
Sample240302-3p4fwsae2w
SHA256 3f94fdc43a79da02e0cfeda60c64be65ae440a0df4d580524cd97c2066684491
MD5 ada8da5dc23f6bdfdc975ae45db91e18
SHA1 6d0b218702c039a80eabb71937d1fd142b6508a6
SHA512 e3d28c4710f2bfd41846d365aa4864a473f649d36692178ebaa90a07f4a944a390310bf1fee68fe225580f3b97f80a653bf3e4cff32e9a63f237f40282e4594a
SSDEEP 1536:HJ1aMYcO0iEaNye7acNFqFKSXrhr7gFi93I:p1aMYcO0YyefF2X5gAG
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/YIZUZ SERVICES.exe

File Explorer

YIZUZSPOOFER.RAR

.rar 60KB
YIZUZ SERVICES.exe

.exe 65KB
YIZUZ SERVICES.exe.config

189B
YIZUZ SERVICES.pdb

23KB

YIZUZSPOOFER.RAR

SHA256 3f94fdc43a79da02e0cfeda60c64be65ae440a0df4d580524cd97c2066684491
MD5 ada8da5dc23f6bdfdc975ae45db91e18
SHA1 6d0b218702c039a80eabb71937d1fd142b6508a6
SHA512 e3d28c4710f2bfd41846d365aa4864a473f649d36692178ebaa90a07f4a944a390310bf1fee68fe225580f3b97f80a653bf3e4cff32e9a63f237f40282e4594a
SSDEEP 1536:HJ1aMYcO0iEaNye7acNFqFKSXrhr7gFi93I:p1aMYcO0YyefF2X5gAG
MD5 SHA1 SHA512 SSDEEP

YIZUZ SERVICES.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3d361fa60d820fac18e66e8913366532a930734f847bc3e7d9e96baa139972fc
MD5 6aaa280799ee36440a08d5432830f60a
SHA1 c1e74bb94a7da5aff6d76c637ae544af1e83d0d3
SHA512 01fca1d087654466e1ba11ad6e2b3c871839605d1b3a2318cd86a34abaa04767ec3a01ac575284a0d63078cef49da20aa0085dc342df618922a499d631d3ae39
SSDEEP 1536:eXd7as9aSuVR95GjHtTZojbGTZ8exv7MUv/sxmY:eXd+s9aSsGjHPRTOG4UvUo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Pedro\Documents\niger\Zeus-BasicSpooferSource\Spoofer menu test\obj\Debug\YIZUZ SERVICES.pdb

YIZUZSPOOFER.RAR

YIZUZ SERVICES.exe

mscoree

dotnet

YIZUZ SERVICES.exe.config

YIZUZ SERVICES.pdb

Sharing

General

Malware Config

Signatures

File Explorer

YIZUZSPOOFER.RAR

YIZUZ SERVICES.exe

mscoree

dotnet

YIZUZ SERVICES.exe.config

YIZUZ SERVICES.pdb