temp spoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

temp spoofer.exe
Size

603KB
MD5

c40446cf9aafdfe0fe0b47c5be25dcbb
SHA1

a15d6beedf36497accef0de0f35299638110fcf5
SHA256

dc85ffe85dbec7e6351c503b7a42ab5ba71466a4dc567c3caf5a8f0cf3615679
SHA512

652151e47c5b49fd5ba92d6fcd0209eb812c37074fe0c6457adac50cf4ab944a092bc9d2c5abd654122ef00365cb976942413903ce3af37ad8fba5a4a424a62d
SSDEEP

12288:yyWVw8/pkwUkvTStUxCj2AqeMQmzFTSpkP2FnD:9F/tuGKFzFTSpkPAnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
temp spoofer.exe

Files

temp spoofer.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ