Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
3Spoofer fu...64.dll
windows7-x64
1Spoofer fu...64.dll
windows10-2004-x64
1Spoofer fu...64.dll
windows7-x64
1Spoofer fu...64.dll
windows10-2004-x64
1Spoofer fu...go.dll
windows7-x64
1Spoofer fu...go.dll
windows10-2004-x64
1Spoofer fu...ss.dll
windows7-x64
1Spoofer fu...ss.dll
windows10-2004-x64
1Spoofer fu...64.dll
windows7-x64
1Spoofer fu...64.dll
windows10-2004-x64
1Spoofer fu...h2.dll
windows7-x64
1Spoofer fu...h2.dll
windows10-2004-x64
1Spoofer fu...go.vbs
windows7-x64
1Spoofer fu...go.vbs
windows10-2004-x64
1Spoofer fu...er.bat
windows7-x64
1Spoofer fu...er.bat
windows10-2004-x64
1Spoofer fu...64.exe
windows7-x64
1Spoofer fu...64.exe
windows10-2004-x64
1Spoofer fu...pt.lnk
windows7-x64
3Spoofer fu...pt.lnk
windows10-2004-x64
7Spoofer fu...64.sys
windows7-x64
1Spoofer fu...64.sys
windows10-2004-x64
1Spoofer fu...er.bat
windows7-x64
1Spoofer fu...er.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Spoofer futuregg/Efi shell/AMIDEEFIx64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Spoofer futuregg/Efi shell/AMIDEEFIx64.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Spoofer futuregg/Efi shell/AfuEfix64.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
Spoofer futuregg/Efi shell/AfuEfix64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Spoofer futuregg/Efi shell/ChgLogo.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Spoofer futuregg/Efi shell/ChgLogo.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Spoofer futuregg/Efi shell/Compress.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Spoofer futuregg/Efi shell/Compress.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Spoofer futuregg/Efi shell/efi/boot/bootx64.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Spoofer futuregg/Efi shell/efi/boot/bootx64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Spoofer futuregg/Efi shell/flash2.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Spoofer futuregg/Efi shell/flash2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Spoofer futuregg/Efi shell/logo.vbs
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Spoofer futuregg/Efi shell/logo.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Spoofer futuregg/HWID Checker.bat
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
Spoofer futuregg/HWID Checker.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Spoofer futuregg/HWID spoof/AMIDEWINx64.exe
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
Spoofer futuregg/HWID spoof/AMIDEWINx64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Spoofer futuregg/HWID spoof/Command Prompt.lnk
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Spoofer futuregg/HWID spoof/Command Prompt.lnk
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Spoofer futuregg/HWID spoof/amifldrv64.sys
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Spoofer futuregg/HWID spoof/amifldrv64.sys
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Spoofer futuregg/mw cleaner.bat
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
Spoofer futuregg/mw cleaner.bat
Resource
win10v2004-20240226-en
Target
Spoofer_futuregg_1.zip
Size
17.6MB
MD5
1e0f2d11e767c304ca9232a1a262bb7f
SHA1
63860d52a416820e7dc941e6362d9a7398738c15
SHA256
fca7c6d081b9bbb7c35c8e28c4ba276763e64a871d83ba6e3b85ba7c9a3b7e0e
SHA512
127f7e59de0cc07ecbccf423c5fe8a998194346224147d69fea9b7c9cd21a9ad0d60ed2a01affe126dfb2baac103e0bcf7a8d163f67823ed8ff76514e898f608
SSDEEP
393216:Q5xPNZosXU9gHVCMtjTA6X3haPwnpidZHRaNGV3FskyAbMOen/1:Q/bosXUuVLZnhaPiid9RaNqekkOy/1
Checks for missing Authenticode signature.
resource |
---|
unpack001/Spoofer futuregg/Efi shell/AMIDEEFIx64.efi |
unpack001/Spoofer futuregg/Efi shell/AfuEfix64.efi |
unpack001/Spoofer futuregg/Efi shell/ChgLogo.efi |
unpack001/Spoofer futuregg/Efi shell/Compress.efi |
unpack001/Spoofer futuregg/Efi shell/efi/boot/bootx64.efi |
unpack001/Spoofer futuregg/Efi shell/flash2.efi |
unpack001/Spoofer futuregg/HWID spoof/AMIDEWINx64.EXE |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
ReadConsoleInputA
GetVersionExA
LoadLibraryA
GetProcAddress
GetFullPathNameA
CloseHandle
Sleep
GetCurrentProcess
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentDirectoryA
DeleteFileA
GetLastError
CreateMutexA
GetModuleFileNameA
GetModuleHandleA
SetThreadExecutionState
SetConsoleCtrlHandler
CreateFileA
DeviceIoControl
ReadFile
WriteFile
CreateNamedPipeA
CreateThread
LocalFree
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetTimeZoneInformation
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
RtlPcToFileHeader
RaiseException
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
DeleteCriticalSection
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetFileType
GetStartupInfoW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
SetFilePointerEx
HeapReAlloc
GetStringTypeW
CompareStringW
LCMapStringW
SetStdHandle
WriteConsoleW
OutputDebugStringW
CreateFileW
SetEnvironmentVariableA
SetEndOfFile
FreeLibrary
SetConsoleMode
ShellExecuteA
RegisterClassExA
DefWindowProcA
DispatchMessageA
TranslateMessage
CreateWindowExA
MessageBoxA
BlockInput
SystemParametersInfoA
ExitWindowsEx
wsprintfA
GetMessageA
OpenProcessToken
LookupPrivilegeValueA
RegOpenKeyExA
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
StartServiceA
OpenServiceA
AdjustTokenPrivileges
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
e:\work\dangerzone\flashdriverwin64\Release\amd64\amifldrv64.pdb
ZwMapViewOfSection
RtlInitUnicodeString
ZwUnmapViewOfSection
ZwClose
ObReferenceObjectByHandle
ZwOpenSection
MmUnmapLockedPages
MmFreeContiguousMemory
MmBuildMdlForNonPagedPool
IoFreeMdl
MmGetPhysicalAddress
MmMapIoSpace
PsGetVersion
IoAllocateMdl
MmAllocateContiguousMemory
DbgPrint
IoDeleteSymbolicLink
IoDeleteDevice
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
KeBugCheckEx
MmMapLockedPagesSpecifyCache
MmUnmapIoSpace
HalTranslateBusAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE