Static task
static1
General
-
Target
InfiniteSp00fer.exe
-
Size
25.2MB
-
MD5
82d72090d914c7579002d58e6694e2b8
-
SHA1
0b94eb25e868e5a9ea1e9912020fa45a6f712630
-
SHA256
173993287d42909ad2146c35d2067643290fd93877fa7322b993994574d2abb8
-
SHA512
095c7732af1426156c4b10af6d8677f2c3da4858144dcec60115fbf4f6e4cbff630d8b614ff0272715ca1505c3e69408ec3534a8a612fdea92b9e7fd301a23d5
-
SSDEEP
786432:0AMbhC96RDwpanFWh3PjV4KLPbhAt3aCQX:wNC96RYanFo3PZ4KLjA3a/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource InfiniteSp00fer.exe
Files
-
InfiniteSp00fer.exe.exe windows:6 windows x64 arch:x64
09da625a48400ef8d139ef993f77fc7b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
kernel32
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetForegroundWindow
gdi32
CreateRoundRectRgn
advapi32
RegisterEventSourceW
ole32
CoSetProxyBlanket
oleaut32
VariantClear
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmSetCompositionWindow
d3dx9_43
D3DXCreateTextureFromFileInMemory
wininet
InternetCloseHandle
normaliz
IdnToAscii
wldap32
ord50
crypt32
CertGetCertificateContextProperty
ws2_32
__WSAFDIsSet
rpcrt4
UuidCreate
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_exit
api-ms-win-crt-stdio-l1-1-0
fread
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-filesystem-l1-1-0
_unlink
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-time-l1-1-0
_localtime64
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 950KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.<az Size: - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.6rT Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sea Size: 25.1MB - Virtual size: 25.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ