spooferasfasdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

spooferasfasdf.exe
Size

465KB
MD5

2e952be4aa70fefb6c30805faaafb347
SHA1

18b2ea042ffb4c41786c731ebb280cb8b5670f81
SHA256

4b1c5f6caf67b8548b1ae93b9512262aafaf676737224ea59a59d08aa4255f68
SHA512

113d61fbfebdb02db4b7057334dd655d929b5c743aa530dbde673b234f8a25f838e7266e9dd99f5d617aa52dd9346be65930b527ff65d79ad01e10c5b949f095
SSDEEP

6144:J7JGNf9REmlDKH83FkuVSXPhNY/rsve52m2HfKHV+Bgof6QsYxDYVBDrZJ8y9n0l:Jor6m+95NY/4vHf6kgmDxQBDtj90yhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
spooferasfasdf.exe

Files

spooferasfasdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\moonp\Downloads\Loader_Made_By_THE2ONES\Loader Made By THE2ONES!\spooferasfasdf\obj\Debug\spooferasfasdf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ