C:\Users\finn\Downloads\Keyauth-Spoofer-Base-main\Keyauth-Spoofer-Base-main\obj\Debug\Helium.pdb
Static task
static1
General
-
Target
FreeSpoofer.exe
-
Size
941KB
-
MD5
79930d5b8caf7309bcc2a130694dcd4a
-
SHA1
a65ba5f6ca8d440ffd977170cb611e68373f40a8
-
SHA256
0466f39b1cf0e0ada0b48739e1f7740e6f202c07d7c8016ae75cbb2ba836e599
-
SHA512
082efddc93218e433e6ddcc0bf64c0c8c7e7487d05a3717c5590d1dc16e6230ba836e26128470edbadb419820d4d447ea60010d8166ad98f733e072aec968400
-
SSDEEP
12288:YAAE5hsn31O3osJDbKskt55I1zWwKBZN1G2pHg0F7PdVeXpMe810prNP/+6yJkNE:Yf31O3oKbI55IKLxPG5MD4d+BJk+uc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FreeSpoofer.exe
Files
-
FreeSpoofer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 912KB - Virtual size: 911KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ