����X+>���Y��J�M�w�$QI�UA���+y���B�qzE�ܩ`Q����E� %�\{q��+��d,�s�G���ʲ�1�2�q<�6):^��G�p~k�����ǽ��S+�$�U~R}<G0S'd������9|?ԥ�{��kL����W��%ObJx�3Z�W�nE�l'<��<����,K��t������L�fm�X�-��/*��W�qC% �V� ���N""�q�2�� �\����N��5���z��c ��T�Z�tl���:�xm8+*{v�LA�K{G$L���Dg�V�VA1�F����B��Ӑ8[$ʋ�Y�Rjr��R ��瀊���^�R0���+�;B�!��#��P���3N�-���пϝ��(p�ە�u�O�_j��U�Z�!��:5��ó�1��m��c�43N+��x���[Y6=,*�{��Pc8�f`�=���|��08grxPH�G��+Փ98b�gV�ݏC3�R�牢n2]�Cp����1-��,�W�D��J���[SU4 w&~����)����]Tr�LA+���[�Y��z��i�o����1ɪ.-^��1�j|�u����IFv�+D�C���vH �Ϛ�M����"u}>�:�c}�4��+_���CQ���C��X�꠶^��\!�*|sM���hh��~$�����ʥU*`�lZ#����~��W~��-���������\�d~-HY�d���H?����U��W|�)���ݿvd�]��(��]�������帍"G�V[�x�EF��i�n��v��W�� ���^#�Pl�ׂ�߫�㝖5m�Ӝ�,��p����o�%꿩#�=nRȧ �ت��,��������n�8�n�uS�������������x���U�ʨ��3}�w������M�2�V��ڂ�XZgn��㱑��9+ �rh A��#�M�5rI� ��Zg�,<�|�CC�w{�;������ 0�X�����v��ۅ�&�Vd$�Vjj��|��F:�#��*���lw��`s����0BY� ���m%=�����Zi.Mh�k8���6�R5A��,�k�D̜���j6�AP��B�6>�1A��Z�Ȭ η��X��,V��i����d�{l� ͮ���Az2��R��86]���,l��/N/?xL�*l�m~��m���|�&��GE�[C�s �X�ЩEH��<e&]�.�wLEuc��k9��c`�����T��4�8>N�T:�T�Vs餦W��]�tj�Kw���ql�?<4��b �)��Q<��I�U��Z�C a�����Mq,�uN��G�dG�e�&�ɀF�\��w���U�R×_�;&t���B��D�����Fn��+�qt噴���sU%��E#$�F<9��h=�]ө�g.)��%���W:q����հ��}�ޙ"�H���uX���O����G\6:�푅a_�3q���""��h���IPP�Y`(���K�֓��J��:ժ=$��9;�4�@������h���Kx|��V�Vj1[���������XR��U�� ��i=�5j)ʷjeQ�����!�"z�"ϛfN*�4<���c�8��BX5��)�{3�`Y��:�8_��q����$:���<�&�D$,��J�;�i�=�����]n�O�!K���W�-Gٱ<n�+���Z��Z�3j�kf7��1Ɍ�+�,���Xs�{�l5���V,1'�_#�����H9��QيT�Mj����������J�ܵ ���q�EMBKVWM����JY�ڗls2z�Z�wWݵ LU��� �ٕ��_="1;�r���W���s��HB��j/�A� ��]�b��VokM��F�K�EW�\�i-(��=K���Bx�klp&W��Iןa�'R:x5&����2�2iq�ҩ��z�e�s�`6�QK�M���$�i�N�~��'rH��;Q/��H�::ל,�$�u\֏!(�f���V�!:|����zq�T��7���S�t�V���>�Ϫ���,���n) ��O$�v�қX���h����N �S��=&�`cy�G�7�����#24[���Ti��fĞM�0�q�1m�BӰ���x��muI����?��ǪsFN�a[TyTf��U��M�Is�e���?��/5V��u����s�7�-��a�j!a�J,�#u�c����B�S}�~g��<�G�#N��"c6$�P1���N�L�dB��J-Q}�YE�[�&�M�=9���R�7ho�7��Զ閛�,��s���6$���h2���_�N���Av��fF���,��繛���:#�|K�zݕ54�T�[�ߴژ]r��ׯ|u����G(�Ψ�sLLa�ppC��oy5�}w�n�(ْ�<���� `��m&~����zʆ��s8��ɒ�0�D3[1�a��LW�U���3d��7j��\@0�^�(�g����$3e��I�����5#��GB��DH�y�^��� �!�aG��[��K3����v�ه�3�f��?���>���m>]����E�L���Ҕ��������.���������eC�����o���k���Z��2gd��)nj�����Ckgw�F1��=u�%>�;L�y��z}�=�y��e0@��L� TJ٧7sR��Z���yN�Wp��A\���*8�y�!��������1<릋I�,�\5A��~��X�����ü��b�͒(�}b�;�7�Z+F�k��5��=�W�� ���u�����܁�T:7��_��n�{�)����S�4����BB1����i妉�x��br7��L��?�q�?�z��! SSb�r�܆ܳ��:;R���qP���A����߲�]:���)Ε1O⼳��x�y���ә��w���C�v��{9P�0'h.�D�"{h�,\�=ɗ�S7�@�9����]*�p��6$mo�'jc�HaJ~�8T�im�j� �� �t�[SW�j�WAs��N���x�p@+jQ/���-ؒp�b�Il�}��'dϚuM��X]d KY�q��V��Vk4MG2 g��PQ-.�;��Ch�a蜠£)�eun�T���~�X.�F'����!��J���
Static task
static1
Behavioral task
behavioral1
Sample
HWID Spoofer.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
HWID Spoofer.exe
Resource
win10v2004-20240508-en
General
-
Target
HWID Spoofer.exe
-
Size
3.7MB
-
MD5
f22a63ef4255cc905f9721abfe74ce8f
-
SHA1
d91e98f944f53bf6a82e899fb843b014778430c1
-
SHA256
98792d5d4086ffa207d8df733638ba083d9bdadf9ef8652aabcd69a169c397c0
-
SHA512
ac06cd1ccea95c7e642af3e422f98c9f593e392f1b8a0ba53615ef2f4ba9ac922b709a47f5f44387082b279bc22b041d2d8672ca2da5279597cd040a42a563b6
-
SSDEEP
49152:F6vfJt/ZM+H7ZtHI2+7AXZjLupdAeEivsBHzMjGs6tgJf/c1MqJl/4ntaNoE:F6vf3Zr/I2dPeEivOwGxMQQao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HWID Spoofer.exe
Files
-
HWID Spoofer.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 279KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 83KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE