C:\Users\Blu\Desktop\blufreenew\MalachiTemp\obj\Debug\MalachiTemp.pdb
Static task
static1
General
-
Target
5175OdclDZKLCRseQINrMAT2NJc9FZXm2bBpfbRP (1).zip
-
Size
28KB
-
MD5
c126551b887261da9d8b01a0bd7e1872
-
SHA1
7ece043e42b382e1ec791083b42e40ba1d210a25
-
SHA256
68bc4ee58e08d5ff73250398a64ad5726ed2b334ccb17f19b2f6c6330787108d
-
SHA512
7fb7cfdfb984a90b09ecad731b0204904cdc383af602bbe0ec68f1fda4ed65a1a6fe23d87e0279067d8dd40e3b0f62b7acdbfc9b1691e64a4d4d7d2163d77144
-
SSDEEP
768:VE54yYLmunOew5rE/UYB38ZCJLBza4eVYVjHmW:VdZdOFmUhM1za4e+ZHmW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BLUFREEMENUV3FOLDER/BLUFREEV3.dll
Files
-
5175OdclDZKLCRseQINrMAT2NJc9FZXm2bBpfbRP (1).zip.zip
Password: 07-29-2013
-
BLUFREEMENUV3FOLDER/BLUFREEV3.dll.dll windows:4 windows x86 arch:x86
Password: 07-29-2013
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BLUFREEMENUV3FOLDER/README.txt