VMAX Natural Spoofer[.]exe

Target
VMAX Natural Spoofer.exe
Size 8.9MB
Sample260808-sqq7vayhpf
SHA256 22f56774e653a6ae26c8734d9b570150d1edee712e954caebf0b79c20dd070d9
MD5 c981fa192b9ebe5ce5e379272299bef0
SHA1 0ed4ae3f4ad23e564aced0b7786239e65e2a1b93
SHA512 70cc9829e321d39192b023f38a00aacee19bf9ed0766fea255448933841494f6870525fb3e261fb3fd865548780419e23fb3d613eff3325614789c5d5c76ed46
SSDEEP 196608:mK250j6w881JOwlxN0NAdL75Lq6HIkJngsJ:m0j6w88LHlxZdn5LIkJng
TLSH
T13D9622FDB7690D66E0538A705621E2EEBD192FADE850C90939847DC3BF391B0F479086
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VMAX Natural Spoofer.exe

File Explorer

VMAX Natural Spoofer.exe

.exe 8.9MB

VMAX Natural Spoofer.exe

IMPHASH 292e93c77655f916da9e7e7a16aa41fe
SHA256 22f56774e653a6ae26c8734d9b570150d1edee712e954caebf0b79c20dd070d9
MD5 c981fa192b9ebe5ce5e379272299bef0
SHA1 0ed4ae3f4ad23e564aced0b7786239e65e2a1b93
SHA512 70cc9829e321d39192b023f38a00aacee19bf9ed0766fea255448933841494f6870525fb3e261fb3fd865548780419e23fb3d613eff3325614789c5d5c76ed46
SSDEEP 196608:mK250j6w881JOwlxN0NAdL75Lq6HIkJngsJ:m0j6w88LHlxZdn5LIkJng
TLSH
T13D9622FDB7690D66E0538A705621E2EEBD192FADE850C90939847DC3BF391B0F479086
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19935816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

winmm

PlaySoundA

kernel32

GetLocaleInfoEx GetSystemTimeAsFileTime HeapAlloc HeapFree ExitProcess GetModuleHandleA LoadLibraryA GetProcAddress

user32

TranslateMessage

gdi32

CreateCompatibleDC

advapi32

ConvertStringSidToSidA

shell32

ShellExecuteA

ole32

CoInitializeEx

oleaut32

SysAllocString

imm32

ImmReleaseContext

dwmapi

DwmExtendFrameIntoClientArea

msvcp140

?tolower@?$ctype@D@std@@QEBADD@Z

ntdll

RtlLookupFunctionEntry

shlwapi

PathFindFileNameW

winhttp

WinHttpConnect

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

normaliz

IdnToAscii

wldap32

ord79

crypt32

CertFreeCertificateContext

ws2_32

getsockopt

rpcrt4

UuidToStringA

userenv

UnloadUserProfile

vcruntime140

strrchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-runtime-l1-1-0

_wassert

api-ms-win-crt-stdio-l1-1-0

ftell

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-math-l1-1-0

_fdsign

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-filesystem-l1-1-0

_unlink

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Name

��

Size

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

��

Size

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

��

Size

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

��

Size

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

��

Size

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

��

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

��

Size

8.8MB

Virtual Size

8.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

��

Size

126KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

VMAX Natural Spoofer.exe

d3d11

d3dcompiler_43

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

imm32

dwmapi

msvcp140

ntdll

shlwapi

winhttp

d3dx11_43

normaliz

wldap32

crypt32

ws2_32

rpcrt4

userenv

vcruntime140

vcruntime140_1

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

generic