Spoofer_Mta_Fodase[.]exe | Triage

Sharing

General

Target

Spoofer_Mta_Fodase.exe
Size

1.3MB
MD5

29f7ac4ede6bd5fe95bf6ede791ac407
SHA1

a590934e5f82ac0e8ed31501e5596b5a6403e267
SHA256

9d23c514a7b5c9094bb3dc272722c6e3c9742d8351d99c3f98aecae1e8bba8e4
SHA512

03bb85c2f450e0c03b6942d56e9752ae5eb52e6c4ce5a2a326fa3472fa3dfd2b082c90e84a8f46ddbb8bc2ebb568e9c63c699a47acb61cf9252f373a9f8d1303
SSDEEP

24576:g/ClUdjYSlvrgBrO1BKH8jPcWYVxHCoh0XeV61r9qZWe7d7NWS91GsVz9cebgS9a:g/5OSlvrgBWBKH8jkDVFCNXODzWS9Hfa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spoofer_Mta_Fodase.exe

Files

Spoofer_Mta_Fodase.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

V}6o)}
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

V}6o)}
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ