Static task
static1
Behavioral task
behavioral1
Sample
Temp-Spoofer-main/TempSpoofer.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Temp-Spoofer-main/TempSpoofer.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Temp-Spoofer-main/imgui/imgui_widgets.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Temp-Spoofer-main/imgui/imgui_widgets.vbs
Resource
win10v2004-20241007-en
General
-
Target
Temp-Spoofer-main.zip
-
Size
1.4MB
-
MD5
1e413e83af456d76749d0996bd9c69a7
-
SHA1
4a914947bfd3384ef7209dd68f27b80625d25faa
-
SHA256
0d1f8012e230a264ca5001a6273912c9e143a06fa045022a35bfe258fca9b77f
-
SHA512
a0f9b6e4a044d2b52b78db772395d8a86b15f29ddc75a302c5e34472d9f7bbdfff155a407fb2c4e3bdaa6422181706ac9ea1ce4a559f7c7a09df44bb5bb90127
-
SSDEEP
24576:BbUGpuVhxFetCJgDvdGZ8+rrEStGxqXfl+yR9epE2I0gxiO521UcgazBGqZP:BbvuPx4tCJgDvEZ8grIxOfQjB22LvZP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Temp-Spoofer-main/TempSpoofer.exe
Files
-
Temp-Spoofer-main.zip.zip
-
Temp-Spoofer-main/Classes.hpp
-
Temp-Spoofer-main/Core.cpp
-
Temp-Spoofer-main/Core.hpp
-
Temp-Spoofer-main/CustomWinApi.hpp
-
Temp-Spoofer-main/LICENSE
-
Temp-Spoofer-main/README.md
-
Temp-Spoofer-main/TempSpoofer.exe.exe windows:6 windows x86 arch:x86
2716f32d1d63b3fc977d6064633b778d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateFileW
CreateThread
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetExitCodeThread
GetFileSize
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseSRWLockExclusive
RtlUnwind
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.OO Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bss Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Temp-Spoofer-main/d3d_Hook.cpp
-
Temp-Spoofer-main/d3d_Hook.hpp
-
Temp-Spoofer-main/imgui/imconfig.h
-
Temp-Spoofer-main/imgui/imgui.cpp
-
Temp-Spoofer-main/imgui/imgui.h
-
Temp-Spoofer-main/imgui/imgui_demo.cpp
-
Temp-Spoofer-main/imgui/imgui_draw.cpp
-
Temp-Spoofer-main/imgui/imgui_impl_dx11.cpp
-
Temp-Spoofer-main/imgui/imgui_impl_dx11.h
-
Temp-Spoofer-main/imgui/imgui_impl_win32.cpp
-
Temp-Spoofer-main/imgui/imgui_impl_win32.h
-
Temp-Spoofer-main/imgui/imgui_internal.h
-
Temp-Spoofer-main/imgui/imgui_tables.cpp
-
Temp-Spoofer-main/imgui/imgui_widgets.cpp.vbs
-
Temp-Spoofer-main/imgui/imstb_rectpack.h
-
Temp-Spoofer-main/imgui/imstb_textedit.h
-
Temp-Spoofer-main/imgui/imstb_truetype.h
-
Temp-Spoofer-main/lib/proxine.lib
-
Temp-Spoofer-main/minhook/MinHook.def
-
Temp-Spoofer-main/minhook/MinHook.h
-
Temp-Spoofer-main/minhook/Nouveau Archive WinRAR.rar.rar
-
Temp-Spoofer-main/minhook/buffer.c
-
Temp-Spoofer-main/minhook/buffer.h
-
Temp-Spoofer-main/minhook/hde/hde32.c
-
Temp-Spoofer-main/minhook/hde/hde32.h
-
Temp-Spoofer-main/minhook/hde/hde64.c
-
Temp-Spoofer-main/minhook/hde/hde64.h
-
Temp-Spoofer-main/minhook/hde/pstdint.h
-
Temp-Spoofer-main/minhook/hde/table32.h
-
Temp-Spoofer-main/minhook/hde/table64.h
-
Temp-Spoofer-main/minhook/hook.c
-
Temp-Spoofer-main/minhook/trampoline.c
-
Temp-Spoofer-main/minhook/trampoline.h