Sleezy Cracked temp spoofer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Sleezy Cracked temp spoofer.exe
Size

654KB
MD5

96a7654fb6e5289f85b22d1109f607d3
SHA1

be18a6870defd229ab8f031c6cf7404bcc27bb28
SHA256

73c95001186d43a8886a61aac7c8b4f6f69a616e0f0b4be108468b992ebdd899
SHA512

97f211c69ff2e2bc5fd8f37153794b6fd62ef27dfbdeaa48fdae87507ce097c0084c65ebccd0b34e863a8c88a5f486fe74bae08ce32914f68bdf288c674baed8
SSDEEP

12288:IZtO+AEjL20zpTOq1qnY7I1P7zmEgxRWcydzARx:otO+AEjL20lTv1qnYgP2E/tdzARx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sleezy Cracked temp spoofer.exe

Files

Sleezy Cracked temp spoofer.exe
.exe windows:6 windows x64 arch:x64

ca2b19b620d3ef2eeef2ef0b239291f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Alex\Desktop\Temp Spoofer\Perm Spoofer\examples\example_win32_directx11\Release\Temp Spoof.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
Process32First
SetConsoleTitleA
CreateToolhelp32Snapshot
Process32Next
CloseHandle
ExitProcess
GetTickCount
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcess
Sleep
TerminateProcess

user32

SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
DispatchMessageA
GetWindowRect
DestroyWindow
CreateWindowExW
GetSystemMetrics
UnregisterClassW
SetCursor
RegisterClassExW
ShowWindow
SetWindowLongA
GetWindowLongA
MessageBoxA
MoveWindow
DefWindowProcA
SetLayeredWindowAttributes
TranslateMessage
LoadIconA
PeekMessageA
PostQuitMessage
UpdateWindow
GetKeyState
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
SetCapture
TrackMouseEvent
GetForegroundWindow

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext

msvcp140

_Query_perf_counter
_Thrd_detach
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_frequency

dwmapi

DwmExtendFrameIntoClientArea

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy
memcmp
memmove
_CxxThrowException
memset
__C_specific_handler
__current_exception_context
__current_exception
__std_terminate
__std_exception_destroy
strstr
__std_exception_copy
memchr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vsscanf
fread
__p__commode
__stdio_common_vsprintf
_wfopen
fwrite
__stdio_common_vfprintf
fseek
fclose
__acrt_iob_func
ftell
fflush

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-string-l1-1-0

strncpy
strcmp
strncmp

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
terminate
system
_initterm_e
_beginthreadex
_exit
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
_wassert
exit
_invalid_parameter_noinfo_noreturn
__p___argc
_register_onexit_function

api-ms-win-crt-math-l1-1-0

__setusermatherr
acosf
ceilf
sinf
sqrtf
powf
fmodf
cosf

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca2b19b620d3ef2eeef2ef0b239291f3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

d3dcompiler_43

kernel32

user32

imm32

msvcp140

dwmapi

d3dx11_43

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 295KB - Virtual size: 295KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 259KB - Virtual size: 265KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 512B - Virtual size: 504B

.text
Size: 295KB - Virtual size: 295KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 259KB - Virtual size: 265KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 512B - Virtual size: 504B