Spoofer 03-06-24[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spoofer 03-06-24.rar
Size

5KB
MD5

8552a450d7079885a31dcde72e7b080f
SHA1

cf562780cd873491b8f0f88b3c785fe279bbf9e6
SHA256

ca3710252a54a81160b7cb88950935bf3b4420cfc33bb976b4f70d724d2430d7
SHA512

4af2ea5bbc12ef83e758f0bcf2e7db62ba47b57d64d2f717ab745cb096042685d3049bd99018834466779e22599a2d483deea5ca9238b7cc468ff545a6529152
SSDEEP

96:7Dce08urEkHWCCVL3QgI7zFvknXsuMqSr9LzaAG2bCSNHms4rliFT2:XZKrEQWFL3Dwpc89r9ypRnbiFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Spoofer 03-06-24.exe

Files

Spoofer 03-06-24.rar
.rar
Spoofer 03-06-24.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\pu6c2\Downloads\code\code\code\code\code\plasmaisud\PlasmaFree\obj\Debug\MoonwareFree.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ