C:\Users\bubajahoda\Desktop\underscore - Copy\underscore\obj\Release\BLAMMED.pdb
Overview
overview
10Static
static
3source my ...ud.zip
windows7-x64
1source my ...ud.zip
windows10-2004-x64
1Properties...cs.dll
windows7-x64
1Properties...cs.dll
windows10-2004-x64
1Properties...ources
windows7-x64
3Properties...ources
windows10-2004-x64
Properties...ources
windows7-x64
3Properties...ources
windows10-2004-x64
3Properties....cache
windows7-x64
3Properties....cache
windows10-2004-x64
3Properties....cache
windows7-x64
3Properties....cache
windows10-2004-x64
3Properties...te.txt
windows7-x64
1Properties...te.txt
windows10-2004-x64
1Properties....cache
windows7-x64
3Properties....cache
windows10-2004-x64
3Properties....cache
windows7-x64
3Properties....cache
windows10-2004-x64
3Properties...tes.cs
windows7-x64
1Properties...tes.cs
windows10-2004-x64
1Properties...ources
windows7-x64
3Properties...ources
windows10-2004-x64
3Properties...ED.exe
windows7-x64
10Properties...ED.exe
windows10-2004-x64
10Properties...ED.pdb
windows7-x64
3Properties...ED.pdb
windows10-2004-x64
3Properties...ressed
windows7-x64
3Properties...ressed
windows10-2004-x64
3Properties...ressed
windows7-x64
3Properties...ressed
windows10-2004-x64
3Properties...ressed
windows7-x64
3Properties...ressed
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
source my paste ud.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
source my paste ud.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Properties/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Properties/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Properties/obj/Debug/underscore.Form1.resources
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Properties/obj/Debug/underscore.Form1.resources
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Properties/obj/Debug/underscore.Form2.resources
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Properties/obj/Debug/underscore.Form2.resources
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Properties/obj/Debug/underscore.csproj.AssemblyReference.cache
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Properties/obj/Debug/underscore.csproj.AssemblyReference.cache
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Properties/obj/Debug/underscore.csproj.CoreCompileInputs.cache
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Properties/obj/Debug/underscore.csproj.CoreCompileInputs.cache
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Properties/obj/Debug/underscore.csproj.FileListAbsolute.txt
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Properties/obj/Debug/underscore.csproj.FileListAbsolute.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Properties/obj/Debug/underscore.csproj.Fody.CopyLocal.cache
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
Properties/obj/Debug/underscore.csproj.Fody.CopyLocal.cache
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Properties/obj/Debug/underscore.csproj.GenerateResource.cache
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
Properties/obj/Debug/underscore.csproj.GenerateResource.cache
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Properties/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Properties/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Properties/obj/Release/BLAMMED.Properties.Resources.resources
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Properties/obj/Release/BLAMMED.Properties.Resources.resources
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Properties/obj/Release/BLAMMED.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Properties/obj/Release/BLAMMED.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Properties/obj/Release/BLAMMED.pdb
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Properties/obj/Release/BLAMMED.pdb
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Properties/obj/Release/Costura/6C6000A5EAF8579850AB82A89BD6268776EB51AD.costura.costura.pdb.compressed
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Properties/obj/Release/Costura/6C6000A5EAF8579850AB82A89BD6268776EB51AD.costura.costura.pdb.compressed
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Properties/obj/Release/Costura/85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B.costura.system.diagnostics.d.compressed
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Properties/obj/Release/Costura/85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B.costura.system.diagnostics.d.compressed
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Properties/obj/Release/Costura/AD3E1CE93782537FFD3CD9E0BB9D30AE22D40DDB.costura.guna.ui.dll.compressed
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Properties/obj/Release/Costura/AD3E1CE93782537FFD3CD9E0BB9D30AE22D40DDB.costura.guna.ui.dll.compressed
Resource
win10v2004-20240802-en
General
-
Target
source my paste ud.zip
-
Size
5.3MB
-
MD5
64c6cc28f0d0a241e038a0292f0dd525
-
SHA1
ef67cd7924516c9b4a6255ae6ccab86a695343ae
-
SHA256
106a08ca27909de6308e132e19565419b4a81acd4da606e999e6d4bf195701a3
-
SHA512
f0a6880ebc2569a49536bf9ed79bec08c4d317e6133e1aed74c691503664dae6da945016b36172f45221865d6cc7795c0f200c68195ade12cbdeab80cbdd3a73
-
SSDEEP
98304:4iPIYzdHaWT3ttq7ma4/4+xDeeunbORIKtaqICdh/dj29o05WquGmMGn:VI8zttYP43i2Baq0oCWqc
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Properties/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll unpack001/Properties/obj/Release/BLAMMED.exe unpack001/Properties/obj/Release/TempPE/Properties.Resources.Designer.cs.dll
Files
-
source my paste ud.zip.zip
Password: v
-
.editorconfig
-
App.config
-
FodyWeavers.xml
-
FodyWeavers.xsd
-
Form1.Designer.cs
-
Form1.cs
-
Form1.resx.vbs
-
Form2.Designer.cs
-
Form2.cs.js
-
Form2.resx.vbs
-
Library/RenderClass.cs.js
-
Library/SharpIMGUI.cs
-
Program.cs
-
Properties/AssemblyInfo.cs
-
Properties/Resources.Designer.cs.vbs
-
Properties/Resources.resx.vbs
-
Properties/Settings.Designer.cs
-
Properties/Settings.settings
-
Properties/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
-
Properties/obj/Debug/BLAMMED.Properties.Resources.resources
-
Properties/obj/Debug/BLAMMED.pdb
-
Properties/obj/Debug/Costura/6C6000A5EAF8579850AB82A89BD6268776EB51AD.costura.costura.pdb.compressed.compressed
-
Properties/obj/Debug/Costura/7CBF42CBF24219DB0C97428A5099BA16CD88A415.costura.antibypass.dll.compressed.compressed
-
Properties/obj/Debug/Costura/85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B.costura.system.diagnostics.diagnosticsource.dll.compressed.compressed
-
Properties/obj/Debug/Costura/E73E7D99547FDBF61ECF4B282902BBBDE7DA588A.costura.guna.ui2.dll.compressed.compressed
-
Properties/obj/Debug/Costura/E7A48D2CFC9EAFB1FCD5E6F99725B1012F305BB6.costura.btguard.dll.compressed.compressed
-
Properties/obj/Debug/Costura/F1F25C01F6ACF33BDD62C4F82D3EF078E76F0906.costura.costura.dll.compressed.compressed
-
Properties/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
Properties/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
Properties/obj/Debug/TempPE/Properties.Resources.Designer.cs.dll.dll windows:4 windows x86 arch:x86
Password: v
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Properties/obj/Debug/underscore.Form1.resources
-
Properties/obj/Debug/underscore.Form2.resources
-
Properties/obj/Debug/underscore.csproj.AssemblyReference.cache
-
Properties/obj/Debug/underscore.csproj.CoreCompileInputs.cache
-
Properties/obj/Debug/underscore.csproj.FileListAbsolute.txt
-
Properties/obj/Debug/underscore.csproj.Fody.CopyLocal.cache
-
Properties/obj/Debug/underscore.csproj.GenerateResource.cache
-
Properties/obj/Release/.NETFramework,Version=v4.8.AssemblyAttributes.cs
-
Properties/obj/Release/BLAMMED.Properties.Resources.resources
-
Properties/obj/Release/BLAMMED.exe.exe windows:4 windows x86 arch:x86
Password: v
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Properties/obj/Release/BLAMMED.pdb
-
Properties/obj/Release/Costura/6C6000A5EAF8579850AB82A89BD6268776EB51AD.costura.costura.pdb.compressed.compressed
-
Properties/obj/Release/Costura/85DC92EDD4B0049ED9049E075C4DEF8A3D64E43B.costura.system.diagnostics.diagnosticsource.dll.compressed.compressed
-
Properties/obj/Release/Costura/AD3E1CE93782537FFD3CD9E0BB9D30AE22D40DDB.costura.guna.ui.dll.compressed.compressed
-
Properties/obj/Release/Costura/D364618BEC9CD6F8F5D4C24D3CC0F4C1A8E06B89.costura.guna.ui2.dll.compressed.compressed
-
Properties/obj/Release/Costura/F1F25C01F6ACF33BDD62C4F82D3EF078E76F0906.costura.costura.dll.compressed.compressed
-
Properties/obj/Release/DesignTimeResolveAssemblyReferences.cache
-
Properties/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
-
Properties/obj/Release/TempPE/Properties.Resources.Designer.cs.dll.dll windows:4 windows x86 arch:x86
Password: v
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Properties/obj/Release/auth.key
-
Properties/obj/Release/underscore.Form1.resources
-
Properties/obj/Release/underscore.Form2.resources
-
Properties/obj/Release/underscore.csproj.AssemblyReference.cache
-
Properties/obj/Release/underscore.csproj.CoreCompileInputs.cache
-
Properties/obj/Release/underscore.csproj.FileListAbsolute.txt
-
Properties/obj/Release/underscore.csproj.Fody.CopyLocal.cache
-
Properties/obj/Release/underscore.csproj.GenerateResource.cache
-
app.manifest
-
packages.config
-
underscore.csproj