C:\Users\NeverKillMe\source\repos\FiveM-Spoofer\Debug\FiveM-Spoofer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
62005bf1c3931.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
62005bf1c3931.exe
Resource
win10v2004-20240226-en
General
-
Target
Spoofer.rar
-
Size
338KB
-
MD5
0d6daef260320c294222bc210d70fdb7
-
SHA1
4f44a90759d347c4d901328316adfa09feb05255
-
SHA256
5a5118210f212759fa69d92c20302476d3202e80e657c8af471b6ba8c9c76775
-
SHA512
6c361cf3302b25b7c5e7d1ea557e39c6766cf54bf89f1a968ed00d6315c2f68d9f65c63ffce95c624a086e36821d1612537dc884a9ca41ebab8944b585f18fcc
-
SSDEEP
6144:LE4kSlnIfGq4CjmVdWnLXy7mTHr7B7GdsKplEtXhDj8YjXgaDOejZqhLfhNvjLHZ:LE4kS84C+SDy7mTHcsK0ZhDjLXgQOgit
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/62005bf1c3931.exe
Files
-
Spoofer.rar.rar
-
62005bf1c3931.exe.exe windows:6 windows x86 arch:x86
ba66dcfc08cd15877a60d0a57560fd16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStdHandle
Sleep
WideCharToMultiByte
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
SetConsoleTitleA
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
CreateProcessW
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFileAttributesW
SetFilePointerEx
SetFileTime
GetTempPathW
AreFileApisANSI
CloseHandle
GetLastError
CopyFileW
CreateHardLinkW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LocalFree
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
RaiseException
GetCurrentProcessId
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetModuleFileNameW
LoadLibraryExW
HeapValidate
GetSystemInfo
GetModuleHandleExW
GetDriveTypeW
GetFullPathNameW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
DeleteFileW
MoveFileExW
ExitProcess
WriteFile
GetCommandLineA
GetCommandLineW
GetCurrentThread
HeapReAlloc
HeapSize
HeapQueryInformation
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
WaitForSingleObject
GetExitCodeProcess
shell32
ShellExecuteA
ole32
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
oleaut32
CreateErrorInfo
GetErrorInfo
VariantInit
VariantChangeType
SetErrorInfo
VariantClear
SysStringLen
SysFreeString
SysAllocString
wininet
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA
Sections
.textbss Size: - Virtual size: 621KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 512B - Virtual size: 370B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ