Static task
static1
Behavioral task
behavioral1
Sample
BlazeHack.exe
Resource
win10v2004-20240709-en
General
-
Target
BlazeHack.rar
-
Size
500KB
-
MD5
e76c40ac6b88a87b66be9c71cb937e89
-
SHA1
a45c11e14a4a4bfcf9a8ae99993fc0c65ef9ab4d
-
SHA256
c135e875430f73d79ba3fbbf5713f7b6bbf17442e1b0dd97d8e754aa7ce683e1
-
SHA512
3e4f3dcf059fcee44b753760080a1d2702c4bebba0b6d8c759878c7eb0522d7824c14b251eb482866631473317528fa0d206a9f0b5410da39f81ca62a70e9b23
-
SSDEEP
6144:aDQedonGLC/35nksGGUbE9uhITFrcU5OGlw0+oaIrxWm8o3noxFEq+JDPl2UDc2I:agUApWlbFmTF1gGqyEaYEqcDPEFRbHpV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BlazeHack.exe
Files
-
BlazeHack.rar.rar
Password: 1212
-
BlazeHack.exe.exe windows:4 windows x86 arch:x86
Password: 1212
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 631KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
laUncD.dll
-
plugins/admin/admin.go
-
plugins/admin/controller/Update.go
-
plugins/admin/controller/api_create.go
-
plugins/admin/controller/api_detail.go.js
-
plugins/admin/controller/api_list.go
-
plugins/admin/controller/api_update.go
-
plugins/admin/controller/auth.go
-
plugins/admin/controller/common.go
-
plugins/admin/controller/common_test.go
-
plugins/admin/controller/delete.go
-
plugins/admin/controller/detail.go.js
-
plugins/admin/controller/edit.go.js
-
plugins/admin/controller/handler.go
-
plugins/admin/controller/install.go
-
plugins/admin/controller/menu.go
-
plugins/admin/controller/new.go.js
-
plugins/admin/controller/operation.go
-
plugins/admin/controller/plugins.go
-
plugins/admin/controller/plugins_tmpl.go.js
-
plugins/admin/controller/show.go.js
-
plugins/admin/controller/system.go
-
plugins/admin/data/mysql/admin.sql
-
plugins/admin/data/sqlite/admin.db
-
plugins/admin/models/base.go
-
plugins/admin/models/menu.go
-
plugins/admin/models/operation_log.go
-
plugins/admin/models/permission.go
-
plugins/admin/models/role.go
-
plugins/admin/models/site.go.js
-
plugins/admin/models/user.go.js
-
plugins/admin/modules/captcha/captcha.go
-
plugins/admin/modules/constant/constant.go
-
plugins/admin/modules/form/form.go.js
-
plugins/admin/modules/guard/delete.go
-
plugins/admin/modules/guard/edit.go
-
plugins/admin/modules/guard/export.go
-
plugins/admin/modules/guard/guard.go
-
plugins/admin/modules/guard/menu_delete.go
-
plugins/admin/modules/guard/menu_edit.go
-
plugins/admin/modules/guard/menu_new.go
-
plugins/admin/modules/guard/new.go
-
plugins/admin/modules/guard/server_login.go
-
plugins/admin/modules/guard/update.go
-
plugins/admin/modules/helper.go
-
plugins/admin/modules/helper_test.go
-
plugins/admin/modules/paginator/paginator.go
-
plugins/admin/modules/paginator/paginator_test.go
-
plugins/admin/modules/parameter/parameter.go.js
-
plugins/admin/modules/parameter/parameter_test.go
-
plugins/admin/modules/response/response.go.js
-
plugins/admin/modules/table/config.go
-
plugins/admin/modules/table/default.go.js
-
plugins/admin/modules/table/default_test.go
-
plugins/admin/modules/table/generators.go.js
-
plugins/admin/modules/table/table.go
-
plugins/admin/modules/table/tmpl.go.js
-
plugins/admin/modules/table/tmpl/choose_table_ajax.tmpl.js
-
plugins/admin/modules/table/tmpl/generator.tmpl.js
-
plugins/admin/modules/tools/generator.go.js
-
plugins/admin/modules/tools/template.go
-
plugins/admin/router.go
-
plugins/example/controller.go
-
plugins/example/example.go
-
plugins/example/go_plugin/Makefile
-
plugins/example/go_plugin/main.go
-
plugins/example/router.go
-
plugins/plugins.go.js
-
plugins/plugins_test.go