SpooferT[.]exe | Triage

Sharing

General

Target

SpooferT.exe
Size

116KB
MD5

92ea11d861079e820b6bd897fe68388d
SHA1

eaa394f73e0a801d87e6d3b6c70e420d5ce911c9
SHA256

ae5e67e64dd0114bd96ff8adf343956584845e03537d5ae59bb344d66765b12d
SHA512

8c18d0676f7034fa54c497600a0c3020222eb8dbb085902b9f08c362331cae5b82c44bb490c6ea8f919269fe4a5e034cb2661cf9f0c141057260a87bb00c59ac
SSDEEP

3072:Kt30snXb38F1gNsExMfr+9DwBa7YSFTcO6VxybATR:2EesExMfK9DwBxSSO6VUb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SpooferT.exe

Files

SpooferT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ