General

  • Target

    spoofer.exe

  • Size

    72.6MB

  • MD5

    f06fcb2b9cf6e48c978de8140a9895f3

  • SHA1

    b4efe7dc8c3701f38daf2aaf74ef088d1ac48d04

  • SHA256

    b2665f90c1c54dcc77aa3cc62acde7f92101b570159a13dc7c5b774665a9bee6

  • SHA512

    b2ea578a7f59af51b81fb43f459dea81981310096290a83fb8e4a6c809b5f5e03938c4aebc0f721522471055bcf5a64a93b5f1d5cced4283941eec9b7188f15b

  • SSDEEP

    1572864:Y4gPXMouRfKSSloORl5ojezrH9PotADF1bp4HJNTD7dFGuzg07/R:Y4AcHRfmoORwjeNllpMNTF4uzg6R

Score
3/10

Malware Config

Signatures

  • Unsigned PE 51 IoCs

    Checks for missing Authenticode signature.

Files

  • spoofer.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    5585f5d849dffc51c08f9c2876f039ac


    Headers

    Imports

    Exports

    Sections

  • locales/af.pak
  • locales/am.pak
  • locales/ar.pak
  • locales/bg.pak
  • locales/bn.pak
  • locales/ca.pak
  • locales/cs.pak
  • locales/da.pak
  • locales/de.pak
  • locales/el.pak
  • locales/en-GB.pak
  • locales/en-US.pak
  • locales/es-419.pak
  • locales/es.pak
  • locales/et.pak
  • locales/fa.pak
  • locales/fi.pak
  • locales/fil.pak
  • locales/fr.pak
  • locales/gu.pak
  • locales/he.pak
  • locales/hi.pak
  • locales/hr.pak
  • locales/hu.pak
  • locales/id.pak
  • locales/it.pak
  • locales/ja.pak
  • locales/kn.pak
  • locales/ko.pak
  • locales/lt.pak
  • locales/lv.pak
  • locales/ml.pak
  • locales/mr.pak
  • locales/ms.pak
  • locales/nb.pak
  • locales/nl.pak
  • locales/pl.pak
  • locales/pt-BR.pak
  • locales/pt-PT.pak
  • locales/ro.pak
  • locales/ru.pak
  • locales/sk.pak
  • locales/sl.pak
  • locales/sr.pak
  • locales/sv.pak
  • locales/sw.pak
  • locales/ta.pak
  • locales/te.pak
  • locales/th.pak
  • locales/tr.pak
  • locales/uk.pak
  • locales/ur.pak
  • locales/vi.pak
  • locales/zh-CN.pak
  • locales/zh-TW.pak
  • resources.pak
  • resources/app.asar
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-arm64-node-22/deasync.node
    .bundle macos arch:arm64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-0.10/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-0.11/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-0.12/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-10/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-11/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-12/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-13/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-14/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-15/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-16/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-17/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-18/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-19/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-20/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-21/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-4/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-5/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-6/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-7/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-8/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/darwin-x64-node-9/deasync.node
    .bundle macos arch:x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-0.10/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-0.11/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-0.12/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-10/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-4/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-5/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-6/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-7/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-8/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-ia32-node-9/deasync.node
    .elf linux x86
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-0.10/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-0.11/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-0.12/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-10/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-11/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-12/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-13/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-14/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-15/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-16/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-17/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-18/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-19/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-20/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-21/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-22/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-4/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-5/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-6/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-7/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-8/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/linux-x64-node-9/deasync.node
    .elf linux x64
  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-0.10/deasync.node
    .dll windows:5 windows x86 arch:x86

    c37f2d56776248737515fcedfdc9a4e5


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-0.11/deasync.node
    .dll windows:5 windows x86 arch:x86

    b2c5e6486f19e51fa2c8726627543b12


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-0.12/deasync.node
    .dll windows:5 windows x86 arch:x86

    b2c5e6486f19e51fa2c8726627543b12


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-10/deasync.node
    .dll windows:6 windows x86 arch:x86

    bab76446d1e79b6fe50816d326a16a65


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-11/deasync.node
    .dll windows:6 windows x86 arch:x86

    bab76446d1e79b6fe50816d326a16a65


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-12/deasync.node
    .dll windows:6 windows x86 arch:x86

    384b417c59c5dbea5adff0a0faeb9bb5


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-13/deasync.node
    .dll windows:6 windows x86 arch:x86

    384b417c59c5dbea5adff0a0faeb9bb5


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-14/deasync.node
    .dll windows:6 windows x86 arch:x86

    cf993d4e50a37a937477c4550758310f


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-15/deasync.node
    .dll windows:6 windows x86 arch:x86

    8a7fe81b9ebc6c75bc4dce79dca72872


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-16/deasync.node
    .dll windows:6 windows x86 arch:x86

    8a7fe81b9ebc6c75bc4dce79dca72872


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-4/deasync.node
    .dll windows:6 windows x86 arch:x86

    cf4c55e4a706dcd6d19e56dc8a64747d


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-5/deasync.node
    .dll windows:6 windows x86 arch:x86

    cf4c55e4a706dcd6d19e56dc8a64747d


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-6/deasync.node
    .dll windows:6 windows x86 arch:x86

    631b24d01c13412a8ff77f00dd2af789


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-7/deasync.node
    .dll windows:6 windows x86 arch:x86

    631b24d01c13412a8ff77f00dd2af789


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-8/deasync.node
    .dll windows:6 windows x86 arch:x86

    631b24d01c13412a8ff77f00dd2af789


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-ia32-node-9/deasync.node
    .dll windows:6 windows x86 arch:x86

    631b24d01c13412a8ff77f00dd2af789


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-0.10/deasync.node
    .dll windows:6 windows x64 arch:x64

    cbc411a13b6edd8ad30e4bf97fbfe7cd


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-0.11/deasync.node
    .dll windows:6 windows x64 arch:x64

    8ae12f9cfebf9a37808f8a1a8708c0e9


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-0.12/deasync.node
    .dll windows:6 windows x64 arch:x64

    8ae12f9cfebf9a37808f8a1a8708c0e9


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-10/deasync.node
    .dll windows:6 windows x64 arch:x64

    21f8432898f14c6b5c55df4198622219


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-11/deasync.node
    .dll windows:6 windows x64 arch:x64

    21f8432898f14c6b5c55df4198622219


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-12/deasync.node
    .dll windows:6 windows x64 arch:x64

    6fb12915d8faafb81f2e6dc3ceb8f8ba


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-13/deasync.node
    .dll windows:6 windows x64 arch:x64

    6fb12915d8faafb81f2e6dc3ceb8f8ba


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-14/deasync.node
    .dll windows:6 windows x64 arch:x64

    6fb12915d8faafb81f2e6dc3ceb8f8ba


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-15/deasync.node
    .dll windows:6 windows x64 arch:x64

    07c941bc4c90739e3b93c0b07d4b935e


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-16/deasync.node
    .dll windows:6 windows x64 arch:x64

    ddba7b369546fa9846baee84aded2621


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-17/deasync.node
    .dll windows:6 windows x64 arch:x64

    a094ed932803df25905d90294c33970f


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-18/deasync.node
    .dll windows:6 windows x64 arch:x64

    a094ed932803df25905d90294c33970f


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-19/deasync.node
    .dll windows:6 windows x64 arch:x64

    1ce40e77ed28367a4dbc4f895b0eb22b


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-20/deasync.node
    .dll windows:6 windows x64 arch:x64

    1ce40e77ed28367a4dbc4f895b0eb22b


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-21/deasync.node
    .dll windows:6 windows x64 arch:x64

    1ce40e77ed28367a4dbc4f895b0eb22b


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-22/deasync.node
    .dll windows:6 windows x64 arch:x64

    a094ed932803df25905d90294c33970f


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-4/deasync.node
    .dll windows:6 windows x64 arch:x64

    f6c1b65025cb54672f742a09e398e7a5


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-5/deasync.node
    .dll windows:6 windows x64 arch:x64

    f6c1b65025cb54672f742a09e398e7a5


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-6/deasync.node
    .dll windows:6 windows x64 arch:x64

    9bede53ea76436af30992f1f3b2805f3


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-7/deasync.node
    .dll windows:6 windows x64 arch:x64

    9bede53ea76436af30992f1f3b2805f3


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-8/deasync.node
    .dll windows:6 windows x64 arch:x64

    9bede53ea76436af30992f1f3b2805f3


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/deasync/bin/win32-x64-node-9/deasync.node
    .dll windows:6 windows x64 arch:x64

    fcbda860d93ab1809e00bbc6925ddbb7


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/nva-direct-showof/build/Release/DirectShowModule.node
    .dll windows:6 windows x64 arch:x64

    cb387b8f5cd9d4553d9ef0a9e550c315


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/nva-pc-inf/build/Release/addon.node
    .dll windows:6 windows x64 arch:x64

    eba58fad437af5bfc5a1e485958a3c7b


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/nva-process-inf/build/Release/addon.node
    .dll windows:6 windows x64 arch:x64

    2450116e0067ec63130658bb88e3230b


    Headers

    Imports

    Exports

    Sections

  • resources/app.asar.unpacked/node_modules/sqlite3/lib/binding/napi-v6-win32-unknown-x64/node_sqlite3.node
    .dll windows:6 windows x64 arch:x64

    9a06fbd4755138af333436729460c562


    Headers

    Imports

    Sections

  • resources/app.asar.unpacked/node_modules/windcrypt/build/Release/windcrypt.node
    .dll windows:6 windows x64 arch:x64

    fbb8520183a6e243f765b345526db9e6


    Headers

    Imports

    Sections

  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Code Sign

    Headers

    Imports

    Sections

  • snapshot_blob.bin
  • spoofer.exe
    .exe windows:5 windows x64 arch:x64

    5d8d583fba535d084df082f4bcef2d21


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections