VMAX Natural Spoofer[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

VMAX Natural Spoofer.exe
Size

9.2MB
MD5

a6129c646b196df9fcef34dce7a7428d
SHA1

49bae728bd8de917297d4cc4cc4b2920306ee465
SHA256

54f7df5f092440505a44b30d40fc9c8947f12681fe5f9b107d4be5d0be3820e0
SHA512

07bd51bfea9766f4f337c3e40b39abdac1be36696bf24bf41c7c0d068b3bdd5c6011ca6302f294fa75144cfbd6556a34c06ed1e9be8db720f4f3e9f5c83307ae
SSDEEP

196608:h10WVQ67ddt0ydv8Dx7Ic+5iUsU782QqNv9FRVOCq+Zx:CsjdERIKWBv9FICx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VMAX Natural Spoofer.exe

Files

VMAX Natural Spoofer.exe
.exe windows:6 windows x64 arch:x64

abf6fbfdb0aa527f875511384ea4093f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

winmm

PlaySoundA

kernel32

GlobalUnlock
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetWindowRect

advapi32

SetKernelObjectSecurity

shell32

ShellExecuteA

ole32

CoSetProxyBlanket

oleaut32

SysStringLen

imm32

ImmReleaseContext

dwmapi

DwmExtendFrameIntoClientArea

msvcp140

??1_Lockit@std@@QEAA@XZ

shlwapi

PathFindFileNameW

ntdll

RtlVirtualUnwind

winhttp

WinHttpCloseHandle

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

normaliz

IdnToAscii

wldap32

ord217

crypt32

CertFindCertificateInStore

ws2_32

connect

rpcrt4

UuidCreate

userenv

UnloadUserProfile

vcruntime140

__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-stdio-l1-1-0

_pclose

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-math-l1-1-0

acosf

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_localtime64

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Exports

Exports

Ethera_Antidll
Ethera_Check
Ethera_Execute_Function
Ethera_Getinput
Ethera_Print
Ethera_Protect
Ethera_Protect_Function
Ethera_Protect_Threads
Ethera_Thread
Ethera_Wait

Sections

��
Size: - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abf6fbfdb0aa527f875511384ea4093f

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

d3dcompiler_43

winmm

kernel32

user32

advapi32

shell32

ole32

oleaut32

imm32

dwmapi

msvcp140

shlwapi

ntdll

winhttp

d3dx11_43

normaliz

wldap32

crypt32

ws2_32

rpcrt4

userenv

vcruntime140

vcruntime140_1

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

Exports

Exports

Sections

�������� Size: - Virtual size: 4.7MB

�������� Size: - Virtual size: 1.3MB

�������� Size: - Virtual size: 3.2MB

�������� Size: - Virtual size: 38KB

�������� Size: - Virtual size: 3.3MB

�������� Size: 11KB - Virtual size: 11KB

�������� Size: 9.0MB - Virtual size: 9.0MB

�������� Size: 5KB - Virtual size: 5KB

�������� Size: 126KB - Virtual size: 125KB

��
Size: - Virtual size: 4.7MB

��
Size: - Virtual size: 1.3MB

��
Size: - Virtual size: 3.2MB

��
Size: - Virtual size: 38KB

��
Size: - Virtual size: 3.3MB

��
Size: 11KB - Virtual size: 11KB

��
Size: 9.0MB - Virtual size: 9.0MB

��
Size: 5KB - Virtual size: 5KB

��
Size: 126KB - Virtual size: 125KB