C:\Users\Chen1119\Desktop\Nin Spoofer\Nin Spoofer\x64\Release\NinSpoofer.pdb
Static task
static1
General
-
Target
65194f88827705ad1a228b28ece49b75efb896b68bc4c21732eacad7c91accd0N.exe
-
Size
14KB
-
MD5
3be8c80106a090d689e563aabfd095e0
-
SHA1
ef7083ca236d53d5d32543961324f5f6fd7fc6e0
-
SHA256
65194f88827705ad1a228b28ece49b75efb896b68bc4c21732eacad7c91accd0
-
SHA512
3ef24673c8867c07ebca10d1b070daa696a9f97b2a9fca33640e25675e87f514b1ad40da8c077699ea779cdeddf7dfb8f8a5aab8c1e6c6302334fc28bc292c2c
-
SSDEEP
192:bcffzWFgHIYcEAl74p4ucb9stGAl74p4ucb9styFX:bc36FT5EAlE23itGAlE23itQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65194f88827705ad1a228b28ece49b75efb896b68bc4c21732eacad7c91accd0N.exe
Files
-
65194f88827705ad1a228b28ece49b75efb896b68bc4c21732eacad7c91accd0N.exe.sys windows:10 windows x64 arch:x64
6fd24e771b7761bd1d692056564b89f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntoskrnl.exe
wcsncpy
RtlInitUnicodeString
MmGetSystemRoutineAddress
MmFreeContiguousMemory
ObfDereferenceObject
IoDriverObjectType
ObReferenceObjectByHandleWithTag
ObCloseHandle
IoCreateFileEx
MmFlushImageSection
ZwDeleteFile
IoFileObjectType
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ