spooferasfasdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

spooferasfasdf.exe
Size

466KB
MD5

9449f461df0a9a4f99f831dfb49f4c19
SHA1

324f92125645f6580f4b63f6fc11666ef23c6740
SHA256

19ab46f27fddfa25eb7132db40f09132871ed6c57dd6e3e7ee4f8035e7d9b269
SHA512

e0c744ac3dc2485ca572011c350d71e48cab828ad0ba186697ff3590beed68dd849f6f81b07c7d41724aa4637c86bdc30b4a1d0a5e19de24dcecc33a933cd928
SSDEEP

12288:iTor6m+95NY/4vHf6kgmDxQBDtj90yhn:i8L+95NpvHfIXDtj90M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
spooferasfasdf.exe

Files

spooferasfasdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\admin\Downloads\Loader_Made_By_THE2ONES\Loader Made By THE2ONES!\spooferasfasdf\obj\Debug\spooferasfasdf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ