Overview
overview
10Static
static
3SmokeySpoo...in.zip
windows10-2004-x64
10SmokeySpoo...ICENSE
windows10-2004-x64
1SmokeySpoo...DME.md
windows10-2004-x64
3SmokeySpoo...config
windows10-2004-x64
3SmokeySpoo...ner.cs
windows10-2004-x64
3SmokeySpoo...uth.js
windows10-2004-x64
3SmokeySpoo...th.vbs
windows10-2004-x64
1SmokeySpoo...go.ico
windows10-2004-x64
3SmokeySpoo...ner.cs
windows10-2004-x64
3SmokeySpoo...ain.cs
windows10-2004-x64
3SmokeySpoo...in.vbs
windows10-2004-x64
1SmokeySpoo...ram.cs
windows10-2004-x64
3SmokeySpoo...nfo.cs
windows10-2004-x64
3SmokeySpoo...er.vbs
windows10-2004-x64
1SmokeySpoo...es.vbs
windows10-2004-x64
1SmokeySpoo...ner.cs
windows10-2004-x64
3SmokeySpoo...ttings
windows10-2004-x64
3SmokeySpoo...csproj
windows10-2004-x64
3SmokeySpoo...er.exe
windows10-2004-x64
10SmokeySpoo...ne.png
windows10-2004-x64
3SmokeySpoo...wo.png
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
SmokeySpoofer-main.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral2
Sample
SmokeySpoofer-main/LICENSE
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
SmokeySpoofer-main/README.md
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
SmokeySpoofer-main/SmokeySpoofer/App.config
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.Designer.cs
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
SmokeySpoofer-main/SmokeySpoofer/Auth.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
SmokeySpoofer-main/SmokeySpoofer/Logo.ico
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.Designer.cs
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.cs
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
SmokeySpoofer-main/SmokeySpoofer/Main.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
SmokeySpoofer-main/SmokeySpoofer/Program.cs
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/AssemblyInfo.cs
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.Designer.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.Designer.cs
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.settings
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.csproj
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
SmokeySpoofer-main/one.png
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
SmokeySpoofer-main/two.png
Resource
win10v2004-20241007-en
General
-
Target
SmokeySpoofer-main.zip
-
Size
748KB
-
MD5
4807068938430adcad94ae1f70444acf
-
SHA1
439c19db57e1636a3a8bdc593ef82d93688ef216
-
SHA256
8f90648143c92c8780cf076b716225ce76fe07e48c10ff5d1d24ed8938791511
-
SHA512
715119fe906f1247a12bfd94575046630041ffe2983ff2cc57c3d3f1f658bb8bfad0e8e4252442b6fdce0b68afa731f62a2c230bd4c6f1b89a7f0dbd08e17700
-
SSDEEP
12288:tieNFD5T5vTBkA6gAksiz/YbxZxCXUxYAuTV8wQWCPmHMHPXHek:timZt5tkNOsn4XeITV8wQ+sfek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.exe
Files
-
SmokeySpoofer-main.zip.zip
-
SmokeySpoofer-main/LICENSE
-
SmokeySpoofer-main/README.md
-
SmokeySpoofer-main/SmokeySpoofer/App.config
-
SmokeySpoofer-main/SmokeySpoofer/Auth.Designer.cs
-
SmokeySpoofer-main/SmokeySpoofer/Auth.cs.js
-
SmokeySpoofer-main/SmokeySpoofer/Auth.resx.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Logo.ico
-
SmokeySpoofer-main/SmokeySpoofer/Main.Designer.cs
-
SmokeySpoofer-main/SmokeySpoofer/Main.cs
-
SmokeySpoofer-main/SmokeySpoofer/Main.resx.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Program.cs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/AssemblyInfo.cs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.Designer.cs.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Resources.resx.vbs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.Designer.cs
-
SmokeySpoofer-main/SmokeySpoofer/Properties/Settings.settings
-
SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.csproj
-
SmokeySpoofer-main/SmokeySpoofer/SmokeySpoofer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 547KB - Virtual size: 547KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SmokeySpoofer-main/one.PNG.png
-
SmokeySpoofer-main/two.PNG.png