Static task
static1
Behavioral task
behavioral1
Sample
InfiniteSp00fer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
InfiniteSp00fer.exe
Resource
win11-20240802-en
General
-
Target
InfiniteSp00fer.exe
-
Size
25.1MB
-
MD5
eb82dc20ff8b51c8b7e4c28e5ae8686e
-
SHA1
7498334d412bf8a771ff1238ed209b07ebeeba32
-
SHA256
192f6979af70a2b3aaa409cc3f33921b724dc64636761bedd06507edf5430102
-
SHA512
5ebbe36f681cccdc75a1bc1c405e138d2e03e5f0fcddd3887acc3e13d6ba8141d99b06132a6b503ec586c6f8299277c1ddd41e18955d06ae16f3093345c378a0
-
SSDEEP
393216:RkjgOCrC/CouGyWMSwibyTi6wX9yQaqUs9IqWAUtU2waEKM7CUXRWSip:MgRSCoueLPby+VtyQVIqo5M7CW6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource InfiniteSp00fer.exe
Files
-
InfiniteSp00fer.exe.exe windows:6 windows x64 arch:x64
f570ff7ce89da54ce125913197eeda67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
kernel32
TlsGetValue
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetForegroundWindow
gdi32
CreateRoundRectRgn
advapi32
DeregisterEventSource
ole32
CoSetProxyBlanket
oleaut32
VariantClear
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmSetCompositionWindow
d3dx9_43
D3DXCreateTextureFromFileInMemory
wininet
InternetReadFile
normaliz
IdnToAscii
wldap32
ord33
crypt32
CertFreeCertificateContext
ws2_32
getsockname
rpcrt4
UuidCreate
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
api-ms-win-crt-runtime-l1-1-0
system
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-string-l1-1-0
tolower
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-multibyte-l1-1-0
_mbsrchr
api-ms-win-crt-math-l1-1-0
sinf
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-time-l1-1-0
_localtime64
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 951KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Wtt Size: - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. 21 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.|)M Size: 25.1MB - Virtual size: 25.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ