bliss[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bliss.exe
Size

1.7MB
MD5

91b933b6f35949b68922869c475a603e
SHA1

4d927216d3afd61577647d122dfa76065d941680
SHA256

5d04253687696ebbf3c04459cdd8f9d3b8eb889477d70df89b24efeda069c701
SHA512

f1005bd7d538ac32f1b36081526e9197a30e4d89ccd85ffef23c9d369383d1579165ca219e94c7db020b563631ac9ee08be22b1225270c0c1b4cbddb76d29366
SSDEEP

24576:w9SMlrfgYsH3kSVuWY+YwWZHFato7kVBTg6yQd9AgJSFe6+CFgTiuiCkpFLnh7V7:wXlri3Y+WfSBkiXz0nnh7iPl

Score

1^/10

Malware Config

Signatures

Files

bliss.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ