Spoofer_1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spoofer_1.exe
Size

2.1MB
MD5

fdf71c7058ac7f1f5961fef2d8a59ab8
SHA1

f394973487d21e5644554220f34b8adc1775f706
SHA256

eb71168c1c06dbc124a4b2c0e017714aaf881844614797dcc7eb8ed08c74a7cb
SHA512

5b1197f3cc6c40dab6edf8e8beedc6451f1fc2adbc3287ff870df5e074d3fb52ede798bcd291ce81abc6812dc20e5909afa5b79d25a568eaa7afca801c695fef
SSDEEP

49152:+MdhRi0P2enkqXfd+/9ATrgBWBKH8jkDVFCNXODzWS9HfX0H:hdvtnkqXf0F9+KH4kpc+DX/0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spoofer_1.exe

Files

Spoofer_1.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thanhdatpc\Desktop\MonsterSpoofer\MonsterProject\Reseller\RebrandPanel\obj\Release\RebrandPanel.pdb

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ