Setup - Bloxshade[.]exe

General

Target
Setup - Bloxshade.exe
Size 9.2MB
Sample260910-smnbsadl31
SHA256 8db4a31b05dec3c5adfc4b7ede9f0d8e4e2eb384524ce829e707c9908492d355
MD5 bf0989e3d758b5956363de58e4ef9bb6
SHA1 52d75e98162d3ae7991669c3b72d77a5ffe3bd1b
SHA512 6b9d14d6e34308152382eb51d8f42aef21f381d00d2fb03c79d9748d012cd0ce929dda26546fdfc73c5be70fe2c571184fb446e4e8bb306045838d31394425fb
SSDEEP 98304:eBX5RzYzAWt0q/G2Asj4xTN+ZD/JdWLM3SpptatNGSR:eBswq/osj4xT2/Jk43+fatgm
TLSH
T1EDA65B21FB9A95E8C07BC43482465672BE3174CA0B35AAEF45C4963A2F76BF05E3D314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Setup - Bloxshade.exe

File Explorer

Setup - Bloxshade.exe

.exe 9.2MB

Setup - Bloxshade.exe

IMPHASH 592e7a98c75be05ccbff9d8b89249253
SHA256 8db4a31b05dec3c5adfc4b7ede9f0d8e4e2eb384524ce829e707c9908492d355
MD5 bf0989e3d758b5956363de58e4ef9bb6
SHA1 52d75e98162d3ae7991669c3b72d77a5ffe3bd1b
SHA512 6b9d14d6e34308152382eb51d8f42aef21f381d00d2fb03c79d9748d012cd0ce929dda26546fdfc73c5be70fe2c571184fb446e4e8bb306045838d31394425fb
SSDEEP 98304:eBX5RzYzAWt0q/G2Asj4xTN+ZD/JdWLM3SpptatNGSR:eBswq/osj4xT2/Jk43+fatgm
TLSH
T1EDA65B21FB9A95E8C07BC43482465672BE3174CA0B35AAEF45C4963A2F76BF05E3D314
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

25:68:d9:02:57:74:3a:2d:9b:91:33:c5:32:9f:2d:05:52:95:08:4a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Extravi,O=extravi.dev,1.2.840.113549.1.9.1=#0c1164616e746540657874726176692e646576

Chains

Sep 10, 2026

CN=Extravi,O=extravi.dev,1.2.840.113549.1.9.1=#0c1164616e746540657874726176692e646576

Minor OS version

0

Major OS version

6

Entry point

301808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\hecker\Desktop\Bloxshade-main\bloxshade\build\start.pdb

kernel32

LockResource CloseHandle LoadResource FindResourceW FreeResource WinExec SetEndOfFile SetStdHandle SetEnvironmentVariableW WaitForSingleObject CreateProcessW SizeofResource FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleFileNameW GetModuleHandleExW HeapAlloc HeapSize HeapValidate GetSystemInfo ExitProcess GetStdHandle WriteFile GetFileType OutputDebugStringW WriteConsoleW GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapFree HeapReAlloc HeapQueryInformation GetProcessHeap ReadFile ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA RtlUnwind

user32

MessageBoxW

advapi32

RegOpenKeyExW RegCloseKey

shell32

ord680 ShellExecuteW

Resubmissions

Sharing