Spoofify Temporary Spoofer 2[.]0-protected[.]exe | Triage

Sharing

General

Target

Spoofify Temporary Spoofer 2.0-protected.exe
Size

21.2MB
MD5

4b633511d131233b3fb6c038001a0410
SHA1

173a9260dd53c821b13f0d4480eb0895aad5e0f3
SHA256

4bd5769ddf6e7e71313e7c857fd4c2f6a0484021d1fe24300eab0df878d7ea0b
SHA512

5ca11f1e1ebd4d506afc3762717e8426c2200a91fe33d197cd5c6739338e9198c91bb1a90c983681a7e4be1d9c750236b9c0696a20760b084ca4319ac0266a9c
SSDEEP

393216:vLNVNHFMR5R9ZXOp28S0FDWpANA0UB7SynDpP6hRGF2go8COT:vLNVNHFMvR9ZXOZpFzSDpCGF28X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spoofify Temporary Spoofer 2.0-protected.exe

Files

Spoofify Temporary Spoofer 2.0-protected.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21.0MB - Virtual size: 21.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ