Static task
static1
Behavioral task
behavioral1
Sample
Blokklist.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Blokklist.exe
Resource
win10v2004-20230220-en
General
-
Target
Blokklist.exe
-
Size
841KB
-
MD5
7886d828da1d54c8c467f2591d7ef628
-
SHA1
fc0817dde362c5a13e0f26ff669a11aa1b8faa98
-
SHA256
87a0ade67bffb799951137cb3e34db145019a8322c0e66b5a7c4a34ca7b4aa07
-
SHA512
99469d7b01c4ca81dfa68e57131fcc7ff19deb1d9c35f601e5f00a6d59999def271def4b691f9da5897f5908647cd6c1fc790ac5bc05f61ac0f68dace1653c01
-
SSDEEP
12288:a9fvPoR1GytQQu0bnCPhgeF722eryFot2wkda7ExshPF21w:a9nPoGyO22JkyFoBkkA21
Malware Config
Signatures
Files
-
Blokklist.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 574KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ