General

  • Target

    spoofer.rar

  • Size

    3.6MB

  • MD5

    907eda767e7b1ebc64febbc6c137f526

  • SHA1

    91539da0720c69ade14e3ad09fa22b749fb062a7

  • SHA256

    72e16381a0b97c951c87b791b09a9b09722ea032f37d0db5cbcb4ef1cc73b1a5

  • SHA512

    7db63e52675062b72628c0841d5adefa9c2fa2c5cc2062b7f9a49ed62f8c15559f6b092a26f1bedc14b37c7313fd39662ebd465cd5885f40ede4ea49945273f3

  • SSDEEP

    98304:WtrWgYL+w4UoF2zuufC5f9GGGx4HFlHL/d/yIUr1G:eUToF2zzs1XHFZ/4IkG

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • spoofer.rar
    .rar
  • clichware spoofer/Cleaner.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • clichware spoofer/kdmapper.exe
    .exe windows:6 windows x64 arch:x64

    8ffa29a9ce383583f4f616936d95b8ca


    Headers

    Imports

    Sections

  • clichware spoofer/s.sys
    .sys windows:10 windows x64 arch:x64

    9cd3a2254af2c5c16a99addca383bf7f


    Headers

    Imports

    Sections

  • clichware spoofer/spoofer steps.txt
  • clichware spoofer/spoofer.bat