spooferrr[.]exe | Triage™

General

Target
spooferrr.exe
Size 821KB
Sample260916-xd1b7sthph
SHA256 096f36981c1424d9e815be4fef0b11c1ad9b32bec9ad0e94b91c749d42e89905
MD5 944312c509c41a68f28fec3133b0e2f3
SHA1 05686f33da9797159681e629848d94d1cb4e3692
SHA512 5c4dfff43ba087a0e56a08d279fa0abd9908d7a4c9b73c6308ff3feddfaa4795e6d56fbebc9499608a9e2a5c910acec54fb848b0af1f5ec050e104ee028bfe97
SSDEEP 24576:paTV9+L5rcO5kWoOlh6PWpJa4hHmW7K8P3pyIH:p8EiO5AGWWraIHhjY4
TLSH
T198052307F68119BBD4C37B7895A873AC0B72DCB666650B23F7FA181B7C21934E95014A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
spooferrr.exe

IMPHASH fa4d5c869351014d1ce952f2833a7558
SHA256 096f36981c1424d9e815be4fef0b11c1ad9b32bec9ad0e94b91c749d42e89905
MD5 944312c509c41a68f28fec3133b0e2f3
SHA1 05686f33da9797159681e629848d94d1cb4e3692
SHA512 5c4dfff43ba087a0e56a08d279fa0abd9908d7a4c9b73c6308ff3feddfaa4795e6d56fbebc9499608a9e2a5c910acec54fb848b0af1f5ec050e104ee028bfe97
SSDEEP 24576:paTV9+L5rcO5kWoOlh6PWpJa4hHmW7K8P3pyIH:p8EiO5AGWWraIHhjY4
TLSH
T198052307F68119BBD4C37B7895A873AC0B72DCB666650B23F7FA181B7C21934E95014A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

25663

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths