RavenXSpoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RavenXSpoofer.exe
Size

5.1MB
MD5

8cb409ea1f2b8d45ba8bf734be3bf2b2
SHA1

e7affcd1d9d8ff71ad56b80d038803ed6687acdf
SHA256

52652c28d8ab79bef93988defb2e5718ad786606eb43e3baa39b7434d71437ad
SHA512

c9fafc5f042cb31b9e3674e0f993e8e42e8fc8da0d1953e1105964dbe2ecb7c338bbb8f90afe126157f8f5f4aa4df2359a25072453b3a524b32763e398a534c7
SSDEEP

98304:+9onX+t70Ln1UFiS8cQRzC/JJa8Vw+4ix9ZXi2FuKuidJe/aGJwQ:+2wo1Uw+0AAcw+lTFdJRu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RavenXSpoofer.exe

Files

RavenXSpoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

0)f
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ