Blue[.]cc[.]rar | Triage

Sharing

General

Target

Blue.cc.rar
Size

5.7MB
MD5

abb20aafcb03673f84be810610e73262
SHA1

08e131e5ef59e64d7713aeec34d336ee602e8187
SHA256

f4e113eaba1238c566ce7eb0a0d8cc1a579d0044533a949098fc332dd25d2146
SHA512

26f01b7a4192c27e685b6b84392cae04bd36ef876b518ee652cd81bd334b78ec612900231e3f828b991c8142eefe45206fcc3976570d6070fafe085e2751b7ad
SSDEEP

98304:nPzPxjBNchBLJX4jTq+Q0SBPOOx7G1NcL+X1pYjJT1xMetHxPP+NlU7qG7BnjuAl:nPdBNcRX9FBm4SciDY91KetRHIM9QRPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Blue.cc/Blue cc/blue.cc.exe

Files

Blue.cc.rar
.rar

Password: 1
Blue.cc/Blue cc/blue.cc.exe
.exe windows:4 windows x86 arch:x86

Password: 1

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Blue.cc/Blue cc/ЧИТАЙ!.txt