Static task
static1
General
-
Target
BloxstrapMod.exe
-
Size
3.0MB
-
MD5
a8a16463b603ca7fd00d83b0f92f4842
-
SHA1
8a6b9ac9b44282bdddbb270fd1433f37650f89cb
-
SHA256
2d0309dff6c3064a0639c47c457a9b5415a4ee7d5fe3111ee2819ed739630ddb
-
SHA512
b538086563bb71fca0aaa417f426992f51356f6a79e791b1c3cf0476f09a33872e12b12cdf193718da156564eee62dd84f2e489ac786ece901628c76a966a2ce
-
SSDEEP
768:dpOffahDFEFQGdpC5+qabgU4GYXjpDguT/pCqPzMNLdl6PQ7nbnVB2jZk4gUYmh2:3OH4gQeCgE5poFL0Q7nbV5tqy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BloxstrapMod.exe
Files
-
BloxstrapMod.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ