blaaack[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

blaaack.exe
Size

370KB
MD5

f065301849401c3ab9afe8329fcc0380
SHA1

ce034ddfe89959f03d1968e18a42f5da541e20aa
SHA256

575b144bbd420541f4b0d34444f75085062b2b50a193b2f36348385b3254fb0a
SHA512

62b9f50cdb042ea05127659a4d6e4321cc15417d686dbb09ffc5c653f15f223ec468971ea511d850084f33a6be9b7679b02cc8c6c9c5d9de7b946ed02cca5201
SSDEEP

6144:/Lsnqpq4+Dm4mh3JYuY9Eva80AmGcboF2mN1aYR:gqVCm4vGcboF2qR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
blaaack.exe

Files

blaaack.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ