BLAMMED[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BLAMMED.exe
Size

1.2MB
MD5

2999afc5abbdb9641a54eae9ac598766
SHA1

883eddb8506624a9ffa27b425fda6c8f3cb13e98
SHA256

5f290acf719693a1bf8a83b3282f57350e4cf57d939d22624d92eb46fa03040d
SHA512

578ee89aa6da3a66b1376e4c1c9736e5b4e9d2873d54f23adaf4f198e5634fc4b23cd4b3ca99eef2358d036a0b7570bdadea1d06aca777fa64ad64aedcf34fb9
SSDEEP

24576:wxfCW/QTcdOBw26xfqkC6RbkClc1STFZqZx9HhOEHQ1jhSCKZ:09/QTNw2uqQRblbTfqZNpw1jhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BLAMMED.exe

Files

BLAMMED.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\pupos\Downloads\Ram\underscore\obj\Debug\BLAMMED.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ