ExploitSpoofer V[.]5[.]exe | Triage

Resubmissions

16/04/2024, 19:45

240416-ygkatscd8w 3

16/04/2024, 19:40

240416-ydqy7scc9s 3

Sharing

Copy URL Twitter E-mail

General

Target

ExploitSpoofer V.5.exe
Size

268KB
MD5

bf7d99f47fb363cf69360de05935f96a
SHA1

39f9b1b2b6f17e77357455e6227d2eb56fdbb81c
SHA256

e7e1ca17fed00138a6a92f3bdffec1694d7bd850292a2c3e65c62a38b1348083
SHA512

88c82162d803defb068b7471b101a5e59405468793eb8c52209511698da98fe2e2a0b21aeb8cf4b6f095628bac660586057af81c44d436b2ae1fd3151562f999
SSDEEP

6144:m/J9cPJIGtaHi4q/qiBjvxMb5jvxMb3So0UPVNAbwaA:m/QIGtaC4qXjvxMb5jvxMbCa/rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ExploitSpoofer V.5.exe

Files

ExploitSpoofer V.5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ataal\source\repos\Last\Last\obj\Debug\Last.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ