General
-
Target
Blammed.exe
-
Size
63KB
-
MD5
07a2486096686a8553430ebf053f611b
-
SHA1
c6fa9432b16ec81dc91c4eba30a2e1bed87a03e0
-
SHA256
a38e4bdb499a7e5cea57617eeea3062ecab7f281bc28e8f0cffee58340a7e397
-
SHA512
bb212f9a0a403fbc32dc14825c4e88d3b129147252ecc5b9efdc37c9e503fbde088af06b3c3881b51e911580c62236ea6448e197d95ec1b9dd3e5f5ec869c6dc
-
SSDEEP
768:6X4YSjO4z+O78dAC8A+XOw0bohuibTfy3g0v2n1+T4FSBGJmDbDvph0oX26DG7S3:Jp+0FuN31OnKOUb9h9BucdpqKmY7
Malware Config
Extracted
asyncrat
Default
吾G9רשn4kIתת伊Ε斯zzΙΒ勒U杰tω
-
delay
1
-
install
false
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.com/raw/t7uDRPdi
Signatures
Files
-
Blammed.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ