blury[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

blury.exe
Size

8KB
MD5

f189f7e1225bdb5ef845fa6706dbd587
SHA1

ef2118ff26bb596a84e2809d73842ff5ff394fae
SHA256

62166d134ba2fc0bba16dfa1fb9b24eff5f5dd22ffd942a9a4f6a41b20ad04a0
SHA512

a892e99f6cb48172b4457e388959b6ebd42520283e5a8dfb59f7b61c84d466cbf1b80da748cb3801efdbbd71203b6a3e2f2409665fc3b015c1d30f6072abf9ef
SSDEEP

96:1OhTPtLkLTiKX9n4rYxJHZ9zX9+lEvEFVONrVG9pUfzj3UzNt:qkLTiI+YnZ5N6Ev4V6VG8fzTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
blury.exe

Files

blury.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\kylum\source\repos\blury\blury\obj\Debug\blury.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ