BlueberrySpoofer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BlueberrySpoofer.exe
Size

21KB
MD5

6f7cd2ba70c6ad0a8d8784ed6bd3c0fe
SHA1

89282d63be31a08f7d20f48c3280443db609437c
SHA256

6fe289c4741e566ab0cc9527d33ddf8ffd0f3bd8e45c9e4bf885a65a372015ed
SHA512

bf93c2c48a16abf31629554086299b0ebb654e97603cf19c75ef5f1ab01ce641af40733c671f5d29dbf918647a618cad61935235003150b9427a2bf87e2ae477
SSDEEP

384:LacXr/ujTKI4bjd/5iADcJba77H6fXZcvkJrEhfJXJnCJLJtptYcFwVc03K:OOVbN5jDr77aniPStYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BlueberrySpoofer.exe

Files

BlueberrySpoofer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\Downloads\i28ove3d\BlueberrySpoofer\BlueberrySpoofer\obj\Debug\BlueberrySpoofer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ