Bloxstrap-v2.5.1-main.zip
- SHA256 e46ddb2b2b2cc74e8306adc682228969d35e2943a917e321bd5db72e744d2d05
Overview
overview
10Static
static
10Bloxstrap-...in.zip
windows7-x64
1Bloxstrap-...in.zip
windows10-2004-x64
1Bloxstrap-....1.exe
windows7-x64
10Bloxstrap-....1.exe
windows10-2004-x64
10Bloxstrap-...I2.dll
windows7-x64
1Bloxstrap-...I2.dll
windows10-2004-x64
1Bloxstrap-...el.sys
windows10-2004-x64
1Bloxstrap-...er.dll
windows7-x64
1Bloxstrap-...er.dll
windows10-2004-x64
3Bloxstrap-...ec.lnk
windows7-x64
3Bloxstrap-...ec.lnk
windows10-2004-x64
3Bloxstrap-...ce.lnk
windows7-x64
3Bloxstrap-...ce.lnk
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Bloxstrap-v2.5.1-main.zip
Resource
win7-20240508-en
windows7-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
Bloxstrap-v2.5.1-main.zip
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral3
Sample
Bloxstrap-v2.5.1-main/BloxStrap v2.5.4.1.exe
Resource
win7-20240508-en
windows7-x64
12 signatures
600 seconds
Behavioral task
behavioral4
Sample
Bloxstrap-v2.5.1-main/BloxStrap v2.5.4.1.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
12 signatures
600 seconds
Behavioral task
behavioral5
Sample
Bloxstrap-v2.5.1-main/Guna.UI2.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
600 seconds
Behavioral task
behavioral6
Sample
Bloxstrap-v2.5.1-main/Guna.UI2.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral7
Sample
Bloxstrap-v2.5.1-main/Kernel.sys
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral8
Sample
Bloxstrap-v2.5.1-main/WebView2Loader.dll
Resource
win7-20231129-en
windows7-x64
1 signatures
600 seconds
Behavioral task
behavioral9
Sample
Bloxstrap-v2.5.1-main/WebView2Loader.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
600 seconds
Behavioral task
behavioral10
Sample
Bloxstrap-v2.5.1-main/autoexec.lnk
Resource
win7-20240221-en
windows7-x64
2 signatures
600 seconds
Behavioral task
behavioral11
Sample
Bloxstrap-v2.5.1-main/autoexec.lnk
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
600 seconds
Behavioral task
behavioral12
Sample
Bloxstrap-v2.5.1-main/aworkspace.lnk
Resource
win7-20240221-en
windows7-x64
2 signatures
600 seconds
Behavioral task
behavioral13
Sample
Bloxstrap-v2.5.1-main/aworkspace.lnk
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
600 seconds
General
- Target Bloxstrap-v2.5.1-main.zip
- Size 2.0MB
- Sample240510-qata6abc72
- SHA256 e46ddb2b2b2cc74e8306adc682228969d35e2943a917e321bd5db72e744d2d05
- MD5 25790aafc4aabb458ab707091f00720b
- SHA1 88f983ab032829b05c2d532eec74769c016b5a63
- SHA512 99e8e2d7ad2c17edb9edc11a22b6c1fa9b5ffeb49f34f0cb45d74f269fc0c8bba6527d82a54251c1fe54b6484abc0d8b8a8a6f59811b725031991a6fbd642d4f
- SSDEEP 49152:2EYoWSwCXw0TX1ohooPlv5MP/KFITYbNbNWo4kSH3OqtwIYJ4:HYNqlo7lxMPiFIT4bNJFY3Oqtv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.1
Botnet
-
Office04
C2
-
192.168.1.114:4782
Mutex
-
10d94abb-0198-407e-aa98-bb80c5b37835
Attributes
-
encryption_key
45C885494447187E9FBAD6C4E1ACD4A1590FC706
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Runtime
-
subdirectory
SubDir
Signatures
- AgentTesla payload 1 IoCs
resource yara_rule static1/unpack001/Bloxstrap-v2.5.1-main/Guna.UI2.dll family_agenttesla - Agenttesla family
- Quasar family
- Quasar payload 1 IoCs
resource yara_rule static1/unpack001/Bloxstrap-v2.5.1-main/BloxStrap v2.5.4.1.exe family_quasar - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bloxstrap-v2.5.1-main/BloxStrap v2.5.4.1.exe
File Explorer
-
Bloxstrap-v2.5.1-main.zip.zip 2.0MB
-
Bloxstrap-v2.5.1-main/BloxStrap v2.5.4.1.exe.exe 3.1MB
-
Bloxstrap-v2.5.1-main/Guna.UI2.dll.dll 2.1MB
-
Bloxstrap-v2.5.1-main/Kernel.sys.sys 23KB
-
Bloxstrap-v2.5.1-main/WebView2Loader.dll.dll 112KB
-
Bloxstrap-v2.5.1-main/autoexec.lnk.lnk 1KB
-
Bloxstrap-v2.5.1-main/aworkspace.lnk.lnk 1KB
Bloxstrap-v2.5.1-main/BloxStrap v2.5.4.1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 52f9d1a2c3d4518da21b3426a0ccefb04e07316755f97de9eaaecc1e09c4b5c7
- MD5 4fe3f16488126ea4b072fc6fcfc910b0
- SHA1 ba0b203f96f771e61d952ab925b773ac475a141b
- SHA512 782a429364de283c8bda39c6f0ffc07847fe3d580a4f0280a9ccd75aeb6420280fe1d0b1a6e61cbd176d8f6fd331b50780c7f8239bff81b6eaf55ae647477697
- SSDEEP 49152:uvEt62XlaSFNWPjljiFa2RoUYIjyDHTmzopoGdSweTHHB72eh2NT:uvY62XlaSFNWPjljiFXRoUYIjyDHh
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3269582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Bloxstrap-v2.5.1-main/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
- MD5 c19e9e6a4bc1b668d19505a0437e7f7e
- SHA1 73be712aef4baa6e9dabfc237b5c039f62a847fa
- SHA512 b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
- SSDEEP 49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla payload
PE Signature issue
Digest
47:b4:cf:f5:c2:a1:e0:36:e9:3f:b8:c2:44:a0:df:33:c2:26:10:62
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sobatdata Software
Chains
Nov 25, 2023
Subject
CN=Sobatdata Software
Serial Number
7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Issuer
CN=Sobatdata Root CA
Timespan
Oct 23, 2019 - Oct 22, 2025
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
2159838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Bloxstrap-v2.5.1-main/Kernel.sys
- IMPHASH 359ca82ee879be4c8360522beea9202e
- SHA256 03eecdd2a3c0096450c674928b4064507134ff5eebffe7ee862e7bb21d528caf
- MD5 81fee73217d4e42359eb0b911830d712
- SHA1 6226af8f4a392349f54b2597ac83c23f9605f795
- SHA512 fa779382dab08ddb3a4d14ec053376863987dd12da1282165a2cf4664d2d8e78148de23555a30dd15d0f151b44df358a90b5a27b1a89cd5a619ed61489a922de
- SSDEEP 384:YMgm6h1pkxpiBvjK5LN3vGYvDGiJnRTNyb8E9VF3AM+oDmltQO4:MAVN/DDG0ENAMxD8tQ5
- MD5 SHA1 SHA512 SSDEEP
Digest
39:52:81:07:fb:31:0a:24:0a:0b:8e:5f:51:cc:eb:8d:25:22:ba:30
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=Zhonghe District,ST=New Taipei City,C=TW
Chains
Dec 8, 2023
CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=Zhonghe District,ST=New Taipei City,C=TW
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=Zhonghe District,ST=New Taipei City,C=TW
Serial Number
0b:88:60:32:86:1d:95:53:c6:8f:80:33:13:a9:89:75
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 11, 2021 - Jun 5, 2024
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
10
Entry point
5792
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\projects\Enigma\Enigma Driver\bin\driver.pdb
ntoskrnl.exe
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
RtlFreeUnicodeString
ExGetPreviousMode
ObfDereferenceObject
PsLookupProcessByProcessId
PsGetProcessPeb
PsGetProcessSectionBaseAddress
ExAllocatePoolWithTag
ExFreePoolWithTag
MmGetPhysicalMemoryRanges
DbgPrintEx
RtlGetVersion
MmUnmapIoSpace
MmMapIoSpaceEx
MmCopyMemory
RtlInitUnicodeString
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
ExAllocatePool
RtlEqualString
ZwQuerySystemInformation
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=3, id=257, version=30795,
count=26, id=1, productName=Unmarked objects,
count=6, id=259, version=30795,
count=5, id=260, version=30795,
count=6, id=261, version=32825,
count=1, id=258, version=32825,
Bloxstrap-v2.5.1-main/WebView2Loader.dll
- IMPHASH 608537c42a46a95b31cc1ef01ab6eeb0
- SHA256 9d5918cec81470225be7478c7e092c24f248e8caa824d667fb57431cad94be71
- MD5 5b17da9adfc5a07fa499dded4fd52747
- SHA1 d1c37478f1029930a03b6bc195c8ef7093ac49b1
- SHA512 f50196d520d77b920c32a12e6c6de20a2dbdf84c88e2c66e086813017a2bda909caa1aabfb4545de4f2b8cd23f2dad1e10b1571abdc62524d44bcfb355ef5432
- SSDEEP 3072:HYchQScnC6uwlKuAef9p3JLT6tOT49LEt2EiJV6mYo:HlQSgC6uKppwEtriKmD
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ca:02:be:45:23:1a:4f:c5:9a:bd:e9:c0:64:b8:65:28:f9:1f:9e:45:9e:b9:55:0d:0f:c0:fb:3d:ec:41:42:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 3, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:ce:78:d4:2c:89:f8:69:73:53:00:00:00:00:02:ce
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 12, 2022 - May 11, 2023
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
1
Major OS version
5
Entry point
16016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb
kernel32
CloseHandle
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ResetEvent
RtlUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
36B
Characteristics
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Bloxstrap-v2.5.1-main/autoexec.lnk
- SHA256 9f8630f7a53624a066fbe2e82755bafab17263569ca005b3f56d83822ad53e93
- MD5 aafedeb80946bdcfce8436972a83df8c
- SHA1 00dd41bfa8eafa527010a7dca42b46adc3022881
- SHA512 0cdbb4580e88ffdf036bcc00a848cc4e932272d8a135bf33194bcb45267589b2bfbef2d486da64566790ebb5231914d9d9903f0f6775832814033fb7c4d0c392
- MD5 SHA1 SHA512
Bloxstrap-v2.5.1-main/aworkspace.lnk
- SHA256 ce3541c501a821014f09f04f770a978c48c31bb134fec2eafdfe0a35d19aa737
- MD5 a09c2beca81814830a8158bc3e7b19a9
- SHA1 f9961723d5355068e5035da7e5b812874ff921fa
- SHA512 49467d131abec16d021051d51ba0976dc8e9a5b9b43b0fe7e24307dfa0646ff495a71d22f557cafa6e576d659c32d3abbb9e669b6128529754d1de474bab8a41
- MD5 SHA1 SHA512