Blade Stealer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Blade Stealer.exe
Size

207KB
MD5

fe877e202fd0720f3eb5a2e46f92d320
SHA1

4c50fccd59b1e2fd947158813bc50cfc993dc92d
SHA256

e1ed0a83183dd61005e2cb09b45b46fe672e32d66774b4e459b1d28e71fae74a
SHA512

0c9d493cf2859cc1e7742a2622e4f4a6ae189cc0345ee3e4599117cc1afc78042e6aeeedea769e9326edb65d0ceffa3bf7b257283f27bfa763b5f75ac67bbc99
SSDEEP

3072:E4l/MrDzKBLUEVvJVnZ8Rzt7pcC787LgJsnVR7YK7fk7oZ5P9g:E6/MrDz+LUE5nszQCMgJsn35P9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Blade Stealer.exe

Files

Blade Stealer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ