Wyvern_Free_Spoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Wyvern_Free_Spoofer.exe
Size

962KB
MD5

6e388e08ed7c039fdd352b9bd652aea4
SHA1

f9a92114b69158eb2c11fd36d9cffeadf4b1e412
SHA256

d791b961fe536e424c3c97744a8457404b235f4c868448b3d1b82ed42c0090d1
SHA512

30ec7521b9045b6bcdb523ef14ea7bdca26aa736d40ebed4f5e33b81633b3f4dc7eb7477f16946a66ae6f6eaa971cecfa4cb0012e9cc0b5891c7642094fe8762
SSDEEP

24576:FITMvRFhRRbNWoCfkYSEH3OqtwIuXHxIPiPq:FITYbNbNWo4kSH3OqtwI+K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Wyvern_Free_Spoofer.exe

Files

Wyvern_Free_Spoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 959KB - Virtual size: 959KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ