Blokoto[.]exe | Triage

Resubmissions

02/08/2024, 22:01

240802-1xdjbsscjq 3

02/08/2024, 21:57

240802-1t4lcawhke 3

Sharing

Copy URL Twitter E-mail

General

Target

Blokoto.exe
Size

177.4MB
MD5

f049f9b4314061951ec8cc02fb80fb6c
SHA1

5d418e2f3be101e6848a748b3854ccb9bc5c2cbb
SHA256

0b2b0151c63a33c8aa4703085de4058c64b5a1fa9ccbe4416347ac988c3a51b5
SHA512

42ee631f205e0125b9df8fc4e07a21b8c9c922e07951a9e7b8d1f0e6da5963babc891d1483141e0e19936f5453bf1ac1fc9da171decc905f953062677d2809d5
SSDEEP

3145728:zOn4/1RFzgjccWX9VE1Elf/Zstl3uGAB2cqg:Sn4/1Ywce41KRstlIEcP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Blokoto.exe

Files

Blokoto.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 58.7MB - Virtual size: 58.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

pck
Size: 106.1MB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 58.7MB - Virtual size: 58.7MB

.data Size: 131KB - Virtual size: 130KB

.rdata Size: 9.2MB - Virtual size: 9.2MB

pck Size: 106.1MB - Virtual size: 8B

.pdata Size: 1.4MB - Virtual size: 1.4MB

.xdata Size: 1.5MB - Virtual size: 1.5MB

.bss Size: - Virtual size: 1.7MB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 21KB - Virtual size: 20KB

.CRT Size: 512B - Virtual size: 112B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 16KB - Virtual size: 20KB

.reloc Size: 266KB - Virtual size: 266KB

.text
Size: 58.7MB - Virtual size: 58.7MB

.data
Size: 131KB - Virtual size: 130KB

.rdata
Size: 9.2MB - Virtual size: 9.2MB

pck
Size: 106.1MB - Virtual size: 8B

.pdata
Size: 1.4MB - Virtual size: 1.4MB

.xdata
Size: 1.5MB - Virtual size: 1.5MB

.bss
Size: - Virtual size: 1.7MB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 21KB - Virtual size: 20KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 16KB - Virtual size: 20KB

.reloc
Size: 266KB - Virtual size: 266KB