proxy's woofer[.]rar | Triage

Sharing

General

Target

proxy's woofer.rar
Size

3.8MB
MD5

5257956e7eeb3dab629dc8762656d618
SHA1

6f1a5c10e8bdfdad2b2aeabc6fb140297ad22637
SHA256

c2cb46401abaa50730f59e048b6d826a5ae5e3d03caae622e4c4d080bdf51262
SHA512

0fca3b7e574478963ed1189ba16479829010296fd9ea4cdd088ca06da7ab01bc6e2f74a71fb468d7d06415636bbd7e435bd4c9d2e092b45f87849e3e327123e2
SSDEEP

98304:quM05dVqozmztWX0BxDuZ+GFzEEnF5RnkqbAXw98nSfDh:9X5dVfOm0f++GHYwT7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/proxy's woofer/Proxy's Spoofer V2.exe

Files

proxy's woofer.rar
.rar
proxy's woofer/HWID Checker.bat
proxy's woofer/Proxy's Spoofer V2.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
proxy's woofer/READ ME FOR INSTRUCTIONS !!!!!!!!!.txt