C:\Users\DeviceIocontrol\Desktop\sppspoof\sppspoof\obj\Release\sppspoof.pdb
Static task
static1
Behavioral task
behavioral1
Sample
sppspoof.exe
Resource
win10v2004-20240508-en
General
-
Target
sppspoof.exe
-
Size
879KB
-
MD5
dfec5f1f24796dec6b55b7d9fd318868
-
SHA1
f075f6373876e58eac37c5847944057ef36dae57
-
SHA256
cafc220d3ec11be0c7808f38db46283472db83b454c7f599d2c03b1fff953877
-
SHA512
26d6d3af382566e5168f35f26ae0ac58fd6b30807c01e6360aa302e68d9ecce3547f8638321814b4615bbcbdcfc1b3bd43d9c01597ba6a56e8c49504631b1e7d
-
SSDEEP
12288:OwITbhKx7WQeu3D9FPJXOmQ+qO39WoCuwTvk83uRCS26qH3OqtwIulkyF3G/:XITMvRFhRRbNWoCfkYSEH3OqtwIuXa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sppspoof.exe
Files
-
sppspoof.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 874KB - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ