spoofer[.]exe | Triage

Sharing

General

Target

spoofer.exe
Size

3.4MB
MD5

975cbe61c4f4e0d13a784796d03537b3
SHA1

7ffdb99686742bf0fa88f2396a5a572147c1278b
SHA256

911f9720b002e156ac5036d660363d1fbd5e97ca5ef21cc847bf778896c4f6d2
SHA512

861709222624934891140382b7f7374a1cb76b73f194e0e98a6e0de541bf26a50158c68757041e7aecfe1a0e0726762d6d152516ddb8a28c3239452eb2ed1149
SSDEEP

49152:TsMF3nZGAWSm3O/YoNFf3I46D10y054PFjAS2pFgGuNTlGdVNT4:gOEklN13IX10iFcrpTqGdk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
spoofer.exe

Files

spoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jess\Desktop\Everything In My Sigma PC\spoofer\spoofer\spoofer\obj\Debug\spoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 427KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ