spoof.rar
- SHA256 c56ed790b4fee8fad6af80fe1298cfae62de6eb1c584ff5122ae9af385c6dffc
Static task
static1
1 signatures
General
- Target spoof.rar
- Size 13.6MB
- Sample260505-2fv8gsb16m
- SHA256 c56ed790b4fee8fad6af80fe1298cfae62de6eb1c584ff5122ae9af385c6dffc
- MD5 4920c30e590cfdf0ae5a9e37741d570a
- SHA1 6ef4b85819e1528e6051f91b81eced5105d7c05f
- SHA512 35387695cd78dc422b8f391c7ecb0665b27e50f0fadcfb3c9bec5596b2fcf5e233ff4daf6ce87318fe59ba94964b13a751f040882dacdf0ec497d79ecbaf112b
- SSDEEP 393216:LV+gDXpQ8IcH94wrJKD/t/DOJPu5MgEXtl:LV5V3IcmBrtrgu5MgEXn
- TLSH T1B3E633F82A3CCFD745F2AA548A44CE02F99AD616CDD4561F5F89BA7A10BB9217303C4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SpooferX/Saqxz Permanent.exe
File Explorer
-
spoof.rar.rar 13.6MB
-
README.txt132B
-
SpooferX/Saqxz Permanent.exe.exe 14.9MB
-
SpooferX/Serialchecker.bat2KB
-
SpooferX/imgui.ini95B
-
SpooferX/key.json40B
-
SpooferX/key.txt28B
-
fix7.bat268B
README.txt
- SHA256 8aabacfdf51321bd69b5100e3c32ace601a6494ebe7477d97156110f27bce053
- MD5 bf907fa8d2ecb4cfec362a6dd2448ee3
- SHA1 156e0175e7a943cc4277aa2fed1b7c77bb22c593
- SHA512 6aacd2cb761e529c4ec0c7ea780abcd63446f3ef7b5b5a1b8b58a33f277bec8ffdf08065baa00c18178f91c88fa8fb69f80421c7d6c7f00b04e12722f4df5f81
- TLSH T16BC02BF0FDB6431B41001008201104E4260714007B01068C1E30C63C84E0F95EBF10F8
- MD5 SHA1 SHA512 TLSH
SpooferX/Saqxz Permanent.exe
- IMPHASH a0fb0580ea3f209ab13aabd2ce93e798
- SHA256 6acbb68770992c7ee16e4e3231a8cf661d995bfd493dfbab546cd2e0d8d7726f
- MD5 cecf88d73f7c9daffaa3bade0e3445b8
- SHA1 0d0a296deaef22b2eb6743d7d2c18e25c74ad417
- SHA512 8e45b1ba7ee853c82c3477ad01b3d1df29b9debf386518123a1495b0ffb79b711c156b8230817ca072c2d2738ce61f14c5296e4e35550d18e76cb8e60d5d096e
- SSDEEP 393216:bl1BarphzEiYZFytT44Dlcr8fpLV1uZviPDYNWHXM+:510phzVz44SkuWDuW3M+
- TLSH T1C6F623DA5B9B92B4C1D31B3029C7179E34D8316E81FC8E6D39CB5C033A51E29D58A7B2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
25176650
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d9
Direct3DCreate9
kernel32
WakeAllConditionVariable
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetClipboardData
advapi32
AddAccessAllowedAce
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
VariantClear
msvcp140
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
imm32
ImmGetContext
dwmapi
DwmExtendFrameIntoClientArea
shlwapi
PathFindFileNameW
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
normaliz
IdnToAscii
wldap32
ord46
crypt32
CertOpenStore
ws2_32
WSASetLastError
rpcrt4
UuidCreate
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
api-ms-win-crt-stdio-l1-1-0
_wfopen
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-string-l1-1-0
_strdup
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-math-l1-1-0
powf
api-ms-win-crt-time-l1-1-0
strftime
api-ms-win-crt-filesystem-l1-1-0
_fstat64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-environment-l1-1-0
getenv
Name
.text
Size
Virtual Size
900KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.|IZ
Size
Virtual Size
9.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.~[u
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gc3
Size
14.9MB
Virtual Size
14.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
SpooferX/Serialchecker.bat
- SHA256 2f900871900c4f6ec7be284ee5d08d09a4fc760b68b8adc3e4ea05e430eefcf2
- MD5 1fa88ce4997f36467d1642ac6aaf6cfd
- SHA1 2508008a36b829b7fcf28835883d86dae3d20889
- SHA512 de0b74b6fea298fb7474cad2a7e09cee98947de93f54142d8ddd5f3c6a096f0d22b5f925e452c42a4282c9c874844c1115c791bc7f8e6def701f10d84365c865
- TLSH T1E1516B457A4096C46DA83B7A0A3555B2B012412F862AAED83FAF43701F533D97E7AF08
- MD5 SHA1 SHA512 TLSH
SpooferX/imgui.ini
- SHA256 5497c0ab609cf1ddc7623e2b5db8e26fce9b99669a4b97cefe2b169b5822c627
- MD5 add7c36d1f354ebb5438cfffa3c46b29
- SHA1 c129d3e586994be3e206463d6fef4e03176dc0d8
- SHA512 b5052ac524c2cbb12e4b6d4947a628e88fc8a77588856e889bf534b9e892e65023455c47ddde8509b9843383892aa2ebe2ae2ca6c5e594da6db6e2a5a98a09b7
- TLSH T185B0120EB372401D02F29040613E22AC36CC6A09F44AB0C010845051AB0782368175C9
- MD5 SHA1 SHA512 TLSH
SpooferX/key.json
- SHA256 70302ddf8270122a8cc37d6a12be9c5c9ded7e1e542413cd1ee0d99b23e872a3
- MD5 50e955795c4203ce265a8334f4922984
- SHA1 8fad783444eb226b6e45440072b19a393a2a318e
- SHA512 b67d7b7c3c42247276831f48ab3db66e12ec0a2d5d2ab29725969f0c7661daf5acf9bac3a9b8f4c0bd0281c074c27ca8cf49b5e532ad807ec935c35871468d69
- MD5 SHA1 SHA512
SpooferX/key.txt
- SHA256 0115507a29ae6f14b2e83757bbdd87ce2197dee37cc640489640167f6aca3647
- MD5 3a577dc4963fa731b66b4faddc79dc47
- SHA1 0f1cb819616819fcb08efd6e03f7f1d721a518a5
- SHA512 cd532bf07b38d4afd30de940b8d7c36c8fcf7ed669f47f0a989c277480b21df4dbd160118de2ca847276c59adf4972c1918d42776cedf394ad84865c0824efaa
- MD5 SHA1 SHA512
fix7.bat
- SHA256 1fe0357426177f9fbd51724298739353a5d76c85f2e892752dfd1ab8ed955b10
- MD5 8daeb98aa2dd570796f6c75aaa2d57ce
- SHA1 7758d40b3fd5d0d554b45449a7ab849b5ec86078
- SHA512 3d7c9ab8dbad1e5e4dbdfb62920fa1ebb8309d08a6178a5262c6863063be2d2c96d1f03a5a4c129683e0f3edfc779cfcaa4c0872b94d5848a05e05a583f5965f
- TLSH T1FCD02B027D0A8A638274ACD09E7E5147B19A82CB90013CF8F5D34250AF5429DDF55DC4
- MD5 SHA1 SHA512 TLSH