Overview
overview
3Static
static
3SmokeySpoo...in.zip
windows7-x64
1SmokeySpoo...in.zip
windows10-2004-x64
1SmokeySpoo...ICENSE
windows7-x64
1SmokeySpoo...ICENSE
windows10-2004-x64
1SmokeySpoo...DME.md
windows7-x64
3SmokeySpoo...DME.md
windows10-2004-x64
3SmokeySpoo...config
windows7-x64
3SmokeySpoo...config
windows10-2004-x64
3SmokeySpoo...ner.cs
windows7-x64
3SmokeySpoo...ner.cs
windows10-2004-x64
3SmokeySpoo...uth.js
windows7-x64
3SmokeySpoo...uth.js
windows10-2004-x64
3SmokeySpoo...th.vbs
windows7-x64
1SmokeySpoo...th.vbs
windows10-2004-x64
1SmokeySpoo...go.ico
windows7-x64
3SmokeySpoo...go.ico
windows10-2004-x64
3SmokeySpoo...ner.cs
windows7-x64
3SmokeySpoo...ner.cs
windows10-2004-x64
3SmokeySpoo...ain.cs
windows7-x64
3SmokeySpoo...ain.cs
windows10-2004-x64
3SmokeySpoo...in.vbs
windows7-x64
1SmokeySpoo...in.vbs
windows10-2004-x64
1SmokeySpoo...ram.cs
windows7-x64
3SmokeySpoo...ram.cs
windows10-2004-x64
3SmokeySpoo...nfo.cs
windows7-x64
3SmokeySpoo...nfo.cs
windows10-2004-x64
3SmokeySpoo...er.vbs
windows7-x64
1SmokeySpoo...er.vbs
windows10-2004-x64
1SmokeySpoo...es.vbs
windows7-x64
1SmokeySpoo...es.vbs
windows10-2004-x64
1SmokeySpoo...ner.cs
windows7-x64
3SmokeySpoo...ner.cs
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
SmokeySpoofer-main.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
SmokeySpoofer-main.zip
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
SmokeySpoofer-main/LICENSE
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
SmokeySpoofer-main/LICENSE
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
SmokeySpoofer-main/README.md
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
SmokeySpoofer-main/README.md
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
SmokeySpoofer-main/SmokeySpoofer/App.config
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
SmokeySpoofer-main/SmokeySpoofer/App.config
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.Designer.cs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.Designer.cs
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.js
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
SmokeySpoofer-main/SmokeySpoofer/Logo.ico
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
SmokeySpoofer-main/SmokeySpoofer/Logo.ico
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.Designer.cs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.Designer.cs
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.cs
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.cs
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
SmokeySpoofer-main/SmokeySpoofer/Program.cs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
SmokeySpoofer-main/SmokeySpoofer/Program.cs
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/AssemblyInfo.cs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/AssemblyInfo.cs
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.Designer.vbs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.Designer.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.vbs
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.vbs
Resource
win10v2004-20240708-en
Behavioral task
behavioral31
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.Designer.cs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.Designer.cs
Resource
win10v2004-20240704-en
General
-
Target
SmokeySpoofer-main.zip
-
Size
581KB
-
MD5
23d5ad584a5094288b5e12150935925c
-
SHA1
f7bd4a4ab5f349ef275d58df9445a6afc23796b4
-
SHA256
d88271eb4440a41f65cad7e1d6c8b6b5f5d627d2bba8783b7ca76890467e9947
-
SHA512
863829d45e6fb12648700b5fd221f00e18c4f14fc721db1f9634686fc846cce65a57024575ba89613b756e1836e141ed9dd9c9a31107c9b79f83001f4e5faaa5
-
SSDEEP
12288:lima08bs6anNi3bEWGSHdWCvFM70vVPmHM8PXHeR:liZ7bas3bETSHXFq0vQsKeR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.exe
Files
-
SmokeySpoofer-main.zip.zip
Password: infected
-
SmokeySpoofer-main/LICENSE
-
SmokeySpoofer-main/README.md
-
SmokeySpoofer-main/SmokeySpoofer/App.config
-
SmokeySpoofer-main/SmokeySpoofer/Auth.Designer.cs
-
SmokeySpoofer-main/SmokeySpoofer/Auth.cs.js
-
SmokeySpoofer-main/SmokeySpoofer/Auth.resx.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Logo.ico
-
SmokeySpoofer-main/SmokeySpoofer/Main.Designer.cs
-
SmokeySpoofer-main/SmokeySpoofer/Main.cs
-
SmokeySpoofer-main/SmokeySpoofer/Main.resx.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Program.cs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/AssemblyInfo.cs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.Designer.cs.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.resx.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.Designer.cs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.settings
-
SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.csproj
-
SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.kbvtrz Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SmokeySpoofer-main/one.PNG.png
Password: infected
-
SmokeySpoofer-main/two.PNG.png
Password: infected