Bloxshade.zip
- SHA256 4a95d9034ae38f6198d39d6e2a8c4d3844c1a0edab402a144a6d678f35e17f1f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup - Bloxshade.exe
Resource
win7-20240611-en
windows7-x64
10 signatures
150 seconds
General
- Target Bloxshade.zip
- Size 3.9MB
- Sample240613-kewdes1dnb
- SHA256 4a95d9034ae38f6198d39d6e2a8c4d3844c1a0edab402a144a6d678f35e17f1f
- MD5 13b630889e1df11d171c0f0368630885
- SHA1 dd7b6d38743d5a090ee8d53fd46cd12862ae8105
- SHA512 0ad296afc04b55f39f3b03be189390942aaca6175767a8438450f6717544a976e3f879a6f58f15c6045f81e6f3ba55e733a5fd70c746f02fa1d4ca24090c184c
- SSDEEP 98304:zzOQMvdhHJib6PrLOPlGg0fwD87RnJGFJ8SHdF:zXMFI6e/6x7+Hf
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup - Bloxshade.exe
File Explorer
-
Bloxshade.zip.zip 3.9MB
-
Setup - Bloxshade.exe.exe 9.0MB
Setup - Bloxshade.exe
- IMPHASH 86143e9d266266935fa6298f3fd08d76
- SHA256 e3b64f3a8630a310186580c84c2a9efa535ef61b06b615e09a54c7c3353f2d26
- MD5 75b48391fb33a984ac667decca6b0ccd
- SHA1 9cb4dea4a8d795369aa298a48910a9d002ad2acb
- SHA512 e56708d35922558e95d12ca274a76eb40c1e23347cbe705c44ad82a1d645fb5abe6b718ea8b224008af9103cc79db03c3b656bc00434b52af291f40e8a5e6321
- SSDEEP 98304:xbWKo/zVIQsun5MxKkCRrXZu+aV1ZIDHCYYgYM7yn5duKYO4rOiZZeMV61lIeaSS:S+1Z9df4jFVgbaDs8i
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
56496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\hecker\Desktop\Bloxshade-main\bloxshade\build\start.pdb
kernel32
SizeofResource
WaitForSingleObject
FreeResource
LockResource
CloseHandle
LoadResource
FindResourceW
CreateProcessW
WinExec
SetEndOfFile
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetLastError
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
HeapAlloc
HeapSize
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
WriteFile
GetFileType
OutputDebugStringW
WriteConsoleW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapFree
HeapReAlloc
HeapQueryInformation
GetProcessHeap
ReadFile
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
RtlUnwind
user32
MessageBoxW
shell32
ord680
Name
.text
Size
395KB
Virtual Size
394KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
121KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8.5MB
Virtual Size
8.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=179, id=261, version=30795,
count=15, id=260, version=30795,
count=1, productName=Unmarked objects (old),
count=16, id=260, version=33218,
count=18, id=259, version=33218,
count=84, id=261, version=33218,
count=7, id=257, version=30795,
count=132, id=1, productName=Unmarked objects,
count=1, id=265, version=33523,
count=1, id=255, version=33523,
count=1, id=151,
count=1, id=258, version=33523,