Fearr_Temp_Spoofer[.]exe | Triage

Sharing

General

Target

Fearr_Temp_Spoofer.exe
Size

16KB
MD5

b5ce986e581481dcbe88849c09e16b51
SHA1

4bcc92d99be00e65e236cff9e6bbebb2fe4be879
SHA256

b08e055e2c8f1d81c692dfce7fe0d467c55063cc10c0f1bc5bf6aba743a8cce1
SHA512

533d49274dd72db47da02c2d1cdd97bffdec8ee0f2266b9d8ded5cb9636f875efb039f2208560da5d9425152ad8c7934b6bfc1cd227c7a2b6639e3cf973ea793
SSDEEP

384:wVYPbsqcssvs24FGbrkONoc5tu/sxi3hFW:wibbHXx0jGc5tu/sxYhY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fearr_Temp_Spoofer.exe

Files

Fearr_Temp_Spoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\fwefe\Downloads\Zeus-BasicSpooferSource\Zeus-BasicSpooferSource\Spoofer menu test\obj\Debug\ZeusSpooferBase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ