Spoofify Permanent Spoofer-protected[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spoofify Permanent Spoofer-protected.exe
Size

19.3MB
MD5

e042bcc1989c29eb3d626be5d8e0c74b
SHA1

a0aa1ab30af584c12c020d3806a20051023905eb
SHA256

2405510a79eae3596af9ab44ca26d55657536c1e28cb3a5442fdfc4679f4dca0
SHA512

6577bf85d74f4506add68b30a4ab2f8c8c4701b244f5007e38a375164992dedc0ca4c0a11b386af53ef6fc88e1af8bbc36eeb3dcf8d17ebfb9a7e9da7d624031
SSDEEP

393216:2TiCGSkOQE6W3g28S0FDWpANA0UB7SynDpP6hRGF/zCOe:QiCGSkOQVpFzSDpCGFLa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spoofify Permanent Spoofer-protected.exe

Files

Spoofify Permanent Spoofer-protected.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19.2MB - Virtual size: 19.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ