General

  • Target

    Spectral Solutions Spoofer.rar

  • Size

    8.0MB

  • MD5

    6621189ea794fd6981c655b3c90d81e4

  • SHA1

    3032e099956e6fa2bb30e6eb6ac21b4c5082ebad

  • SHA256

    3ed4d5a8baac20e8226e93b307c6e9e8c821be7f09ed725317d7fd5dd754e69c

  • SHA512

    15e61207877fe9471b971107add33598bdc74fda65287657708ee9a77258da3792311569846bf8c914b395d6c203634ce35697bc2ea7cbd458af398267c8276f

  • SSDEEP

    196608:xXPUl0FI5ZqTEjYsQvclq/9UJGaL25IxhEWSYQAwC:xPUSFI1j9QvTO52FZA9

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Spectral Solutions Spoofer.rar
    .rar
  • CAuth.h
  • Colors.h
  • DiamorphineGuard.h
  • OtherStuff.h
  • TMPB125.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • antidisassembly.cpp
  • auth.hpp
  • cfflattener.cpp
  • custom_entry.cpp
  • cweFRfIW
  • gui.cpp
    .js
  • iat.cpp
  • includes.h
  • lazy.h
  • lea.cpp
  • main.cpp
  • mov.cpp
  • obfuscator.cpp
  • obfuscator.h
  • pe.cpp
  • pe.h
  • skStr.h
  • utils.hpp