Aorist Spoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Aorist Spoofer.exe
Size

3.0MB
MD5

79f6620478f8ea478bc7f2e26a029949
SHA1

0dfea269f6ea4153c3f8057ed6915275ee9fa409
SHA256

48d5c4a8f697106c56a77b5e2cda36db1b4e79f5b9190abe0ec4346790a7cf48
SHA512

55db83635e25cf177c8d930d79e37a8d817ca43b107bdb6572c31dd25697d43c3d657b005e521ed0cf0a59f2910aeabe35386bf73de846bd1541221611867bcd
SSDEEP

98304:FIT4bNJFY3OqtXkqXf0F9+KH4kpc+DX/0H:FjBHYnkSIEKYOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aorist Spoofer.exe

Files

Aorist Spoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sultan\source\repos\Spoofer\Spoofer\obj\Release\Aorist Spoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ