Spoofer2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spoofer2.exe
Size

1.7MB
MD5

30f68f3b3be69fa224cf576292827fda
SHA1

866390c5b078bf67da1fd365e397ab04c21a6b35
SHA256

d565fe1dee0699a7b0b4734108ba00b4ad2b2591e8f80989f33de005cbf8a6ca
SHA512

9bfd670748b0beec1c351b077493d49bfccb5ce130055a5f446a3571aebc2df816eea1c2332f53bc107f0969fd75a4c7fb70a18f438fb471dd76b338cf8f9468
SSDEEP

49152:CTi0P2eSkqXfd+/9ATrgBWBKH8jkDVFCNXODzWS9HfX0H:CTtSkqXf0F9+KH4kpc+DX/0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spoofer2.exe

Files

Spoofer2.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\MonsterService\Monster Spoofer\Old\MonsterEN\RebrandPanel\obj\Release\RebrandPanel.pdb

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ