spoofernigga_patched.rar
- SHA256 765bd6860180a301f70f25377c5eaffc58ec0a091d30a266e2ca0943cf1c72aa
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
spoofernigga_patched.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target spoofernigga_patched.rar
- Size 13.4MB
- Sample260706-rtxncsb15m
- SHA256 765bd6860180a301f70f25377c5eaffc58ec0a091d30a266e2ca0943cf1c72aa
- MD5 8a35cd4ba17f12a5dc224b8b56213468
- SHA1 a3c7cc8820e8a8fae293763aca6954c789de8655
- SHA512 da817dfe60ca37ec38d6e005932cdc47c303b810d57be8b7fcb7baca9b987987730299ce13e2f566e3fd79dfb038a514e1f6becadda6661b5f94413f74a72113
- SSDEEP 393216:HNJgR52gdirQsDrHPDIZMajDyo6rDgCjQbzFrm+cWGz:tJ852yOV/IZ7vigCjQbzUt
- TLSH T121E6338D3F76AED5DF9E2225CE80A905B5724DEA1DCA0B061C409D7609CEE43DF6C4AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/spoofernigga_patched.exe
File Explorer
-
spoofernigga_patched.rar.rar 13.4MB
-
spoofernigga_patched.exe.exe 14.9MB
spoofernigga_patched.exe
- IMPHASH 46414618c28c8f3cd94bb49248522904
- SHA256 b4e16bafb061c2b51cf10ab910cbd5c75c833f547a7cebbf01adf47e7d4e2f36
- MD5 1c97f7f24a3e55f0c3d90c7efd5216f9
- SHA1 009abf476376cf6febc5e5e151856949f87bd314
- SHA512 4ebb7146adf3c69cf21559aa2ca36637c1cc9c289cc1282a2da09ac0bb1c6ecde367ff59cc32393a0b30238f489c8764b132bdeaec3980a39a00b2e630d3f299
- SSDEEP 393216:mjq0iw+y+wFl2BH1DrJekBJAyyOEot5G1m4vA6Bu1:mg/wFlYDVvBMotc1PAd
- TLSH T1B1F623D17EC666A8C0EB8A38A1C7434D70B2B7C982F94A4E3BC59C0236C1F175E5B5D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
12085088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
webview2loader
CreateCoreWebView2EnvironmentWithOptions
kernel32
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
UpdateWindow
advapi32
CryptDecrypt
shell32
ShellExecuteExW
ole32
CoTaskMemFree
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
wininet
InternetCloseHandle
crypt32
CryptBinaryToStringA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
fwrite
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-runtime-l1-1-0
_set_app_type
api-ms-win-crt-string-l1-1-0
isalnum
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
._L5
Size
Virtual Size
10.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.KkA
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.Sl.
Size
14.9MB
Virtual Size
14.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ