Artic_Hwid_Spoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Artic_Hwid_Spoofer.exe
Size

372KB
MD5

46b3032d8c5cc68ed232ccc88bcfc58c
SHA1

baf218a59298bbd506ca6daccb19245c2039887a
SHA256

da88d5730bc245898a550895c341ad6bdc03c371687b531e11328bfd83d05d16
SHA512

01cf486f4cd6b39c7d78bea050f4dd3c3a96cc5b44c958b693e590d3ffbd5f6fbf11a5c75bc217e632d55db498c9ddd8fbc616e13a19490e1d9d6449e3de55fc
SSDEEP

6144:Gcx1kdubo9kxaWnRspj6FxYGB5BVJAG5xeUK33RjpMfyFrxsSzQm:Gy1u9kx267BPAGLX4VMfy5KD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Artic_Hwid_Spoofer.exe

Files

Artic_Hwid_Spoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.C7'
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.g]X
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1qj
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ