Blackshades Public Ed[.][.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Blackshades Public Ed..exe
Size

198KB
MD5

7e06ef3bd2e24de80dfbdd3878e65b04
SHA1

2afaafe0bbf3f452c9ed3b0875e504d2e4e178be
SHA256

6c7e2aaeda53f06e457f7cc24ae57ed5d7d04fa0e8d06faeabeceb901c268cc1
SHA512

9c7e060c09197f349ee0381cf44ec4f891d2df62d153d7ca4cefb7dcd012614134ac57527b0f8216bbb8e60126ed02cd886d501fa627ef3aa0c8e3a867355756
SSDEEP

1536:b4lpePF+iTM6J/2ehpedrhaxa1sTLm/kWu7TINatazF9W:b4lpxiACh4hKev3nkX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Blackshades Public Ed..exe

Files

Blackshades Public Ed..exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ