ZeusSpooferBase[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZeusSpooferBase.exe
Size

20KB
MD5

b9398a07cc5ae5b6d61a63d6a641ba5e
SHA1

1d8fa4e6ce57f8f1560ef6b406a7d247f776ffa1
SHA256

582f33edaeac3ba875579888e294de3e16250b1eb8b8f563b367cc59bfc2c2f0
SHA512

9ecc812e7a198b8ca7813764f976c0512020dea488a4b164c13cf08a6aa1e9b23946141e2fc7658ed8789124f908d56295005bdf257db28eb0f368e7c0997ba5
SSDEEP

384:ZIp4nbsqcssvtT48SfE1QAbExI8kONoc5tu/sxi3hFW:ZHbbHkifEuTI2Gc5tu/sxYhY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZeusSpooferBase.exe

Files

ZeusSpooferBase.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\noaht\Desktop\Desktop\Coding\Projects\Fn woofer\Zeus-BasicSpooferSource\Zeus-BasicSpooferSource\Spoofer menu test\obj\Debug\ZeusSpooferBase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ