DigitalServices_Spoofer[.]exe | Triage

Sharing

General

Target

DigitalServices_Spoofer.exe
Size

3.5MB
MD5

0886fd3a858636b42f2f8b3fe78e7e8b
SHA1

27fd3cd5c69e87d06be1fdd23ae31244cb6e1f8c
SHA256

92eb383902968583b636e453eb4915bcd0c0897e22e172d98a095c8388a0d68d
SHA512

3e5ac83c5f0a6c12b482e8f8757235543a9f46b171b5a272660b81cbde4591acaaecad3ca9ae86b71e11beb545d6b8a0f62b9d8d4f74641fb8344b5f100b2322
SSDEEP

98304:NvKcFpp+a0vKcFpp+ax/EHvKcFpp+ay7K5JEyUa:NvKmb0vKmbyHvKmbWKHEyU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DigitalServices_Spoofer.exe

Files

DigitalServices_Spoofer.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\v0d4.exe\Documents\c# projects\permspoofer + gui (NICE)\underscore\obj\Release\DigitalServices_Spoofer.pdb

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ