FMX FREE SPOOFER[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FMX FREE SPOOFER.exe
Size

190KB
MD5

180dd9166523ec9270799d62ad83a93d
SHA1

dc7847ec569cac13ede0edf391cd2f235e6fe8b1
SHA256

cbe39e2fcc7be8cb2a6911be2da3514a73ed98c09ef8ae974bfe4a2635779fba
SHA512

5a19a4e8c01c98c45efa7dbf5494f7c7c7440501405ada17e2c1dfb26f7569bdfdbb29bfeeab9c932f903151eedefd1fbce67c304f6bc8738e309f9614bccd44
SSDEEP

1536:KuJb2GWy7uYFHI/z24ES8a/0UOmFq75Wm:K9y6EoL24E1A0jmFqv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FMX FREE SPOOFER.exe

Files

FMX FREE SPOOFER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Zyan\Desktop\BBH FREE SPOOFER\BBH FREE SPOOFER\obj\Debug\BBH FREE SPOOFER.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ