BLAMMED_Guard[.]exe | Triage

Sharing

General

Target

BLAMMED_Guard.exe
Size

762KB
MD5

32989c0e05b4f250c03539cc0b855128
SHA1

fad747e5e2d5621f1bead6a47bdd0b6491356032
SHA256

bd1e5b2f63527801608ef3a0b292d23935a9e89b276c833565bd75fb9356b8b2
SHA512

10b136ac5fb5a476ce9a2b0f0a6e361946f8b799fcc6947b5ccec04df7d00e72fd8917e4b092f6969c4a6f044932bf5c7da5f4d6130205529e2631ad44d7a8f3
SSDEEP

12288:eiK1hh1eRNIM/sfDtOMboz/BXt5C86quLYbzqAO3sOp4FTGhfttet2wkZ0nHz837:VK104foz/Vt5Cj1LAqAOHN3UQwkenT8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BLAMMED_Guard.exe

Files

BLAMMED_Guard.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 756KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ