C:\Users\Raxyz\Desktop\ntrntrn\ImGui-Loader-Base-master\x64\Release\ImGui Loader base.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Jingo_Spoofer.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Jingo_Spoofer.exe
Resource
win10v2004-20240802-en
General
-
Target
Jingo_Spoofer.exe
-
Size
378KB
-
MD5
7f52dced49859ac4fad787f71e89f77c
-
SHA1
b35ee73feb9922c15036fa64ea0ea0ac39b9d1c0
-
SHA256
80e71d28bbc0ae26dd992e6363e8789af63fe1e03bc14250947e1bd2fd3ba2f4
-
SHA512
8eb00c3f7ccb1c4850d5183f0797bbf323f1bf24f5e5e94fa0576e41593c13bcba33baf2e7bd962854b22689aed1402d4b28be8dea775f991fdfaf4f6732aec8
-
SSDEEP
6144:8GTo8Cha/IHVcY0J3VSQYTk9GmxImmq/4uTt19XyasnfQv:x1CaQHVc3BQk9lxVguT1sn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Jingo_Spoofer.exe
Files
-
Jingo_Spoofer.exe.exe windows:6 windows x64 arch:x64
7ba300c79077752dfc0e81dd0b93545e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
QueryPerformanceCounter
SetCurrentDirectoryA
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WideCharToMultiByte
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
WaitForSingleObjectEx
MultiByteToWideChar
CloseHandle
user32
ScreenToClient
EnumDisplayMonitors
MonitorFromWindow
SetWindowPos
GetDC
DestroyWindow
LoadCursorA
GetKeyState
AdjustWindowRectEx
GetCapture
UpdateWindow
GetDesktopWindow
PostQuitMessage
SetWindowTextW
TranslateMessage
MessageBoxA
GetWindowRect
DispatchMessageA
WindowFromPoint
SetWindowLongA
ClientToScreen
SetClipboardData
GetClipboardData
EmptyClipboard
IsChild
GetMonitorInfoA
GetForegroundWindow
DefWindowProcA
PeekMessageA
ShowWindow
CloseClipboard
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
OpenClipboard
GetCursorPos
ReleaseDC
SetCursorPos
IsIconic
SetForegroundWindow
ReleaseCapture
RegisterClassExA
UnregisterClassA
GetClientRect
SetCapture
SetCursor
SetWindowLongW
GetWindowLongW
gdi32
GetDeviceCaps
xinput1_4
ord4
ord2
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
d3d9
Direct3DCreate9
urlmon
URLDownloadToFileA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
__C_specific_handler
__current_exception_context
__current_exception
__std_exception_copy
__std_exception_destroy
_CxxThrowException
strstr
__std_terminate
memchr
memcmp
memcpy
memmove
api-ms-win-crt-stdio-l1-1-0
_set_fmode
fseek
fclose
fflush
__acrt_iob_func
fread
ftell
__stdio_common_vsprintf
__stdio_common_vsscanf
_wfopen
__p__commode
fwrite
api-ms-win-crt-string-l1-1-0
strncmp
strncpy
strcmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_set_new_mode
free
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_cexit
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_crt_atexit
_initialize_onexit_table
_get_narrow_winmain_command_line
system
_wassert
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
terminate
_invalid_parameter_noinfo_noreturn
_c_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
floorf
acosf
ceilf
cosf
sinf
sqrtf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ