blnd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

blnd.exe
Size

107KB
MD5

8ccdcc4152c89458722fcb8a6e46b81b
SHA1

0aabff12ccd62c8ffadc3cd3bfc0319312a79b61
SHA256

80df04bd069a2949f550ca0a99f06c4b25869da31d4b5fdda65e9360a9821c7d
SHA512

25e5cad2e8d8efa59a163cf0d3e514b27e2f7d4a6de9f533b38983b23accb0facc8f2758e4fa0afaab53c13127e0c4261df2b688512a24f2f41cbaaa32e00c98
SSDEEP

3072:P3eMcRMgF45vBIpnhHjqrdSkJiUsVOcZP1yb9M6:fFBIpnhHj85iUsVO84b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
blnd.exe

Files

blnd.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ