PayxFreeSpoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PayxFreeSpoofer.exe
Size

234KB
MD5

23b48491c5762e15ffeebb8f37910956
SHA1

d999e9a6d05ae8383048342e579cd31f6593fece
SHA256

082f5a5e4f1ef6ce740cc9b2100d4dad13a36b01a88a8d19fae20f993fa99c71
SHA512

8cdc2c8e9f4895b41f35e3b924f74087f119d5cb04d22030ef69402d73b451e701158393c45d1110870e3ac64dbec82818d5fef498faf3515275c3fd71cc77ef
SSDEEP

3072:lmxNEKOVM8BudmQR+XHLZeQaZjylN99q589DXfRP5YVVAxNUuGs2Uo:8zOKSumHbZSl69k89rfRBqVsNrwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PayxFreeSpoofer.exe

Files

PayxFreeSpoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Damon\Desktop\PayxFreeSpoofer-Sourcecode\PayxFreeSpoofer-Sourcecode\PayxFreeSpoofer\obj\Debug\PayxFreeSpoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ