home

blekkoic.exe

Blekko, Inc.

The application blekkoic.exe by Blekko has been detected as adware by 4 anti-malware scanners. It is also typically executed from the user's temporary directory.
Publisher:
Blekko, Inc.  (signed and verified)

MD5:
d7da4d70c1f6d6a0fbd09b3fd7279c1f

SHA-1:
56ca2800a24f10b8dae5e220f09c450f014821c5

SHA-256:
b8757231405d7c4cee932a2225b9ba006ddd514652d18b966362cb03cd6325f2

Scanner detections:
4 / 68

Status:
Adware

Analysis date:
4/26/2024 12:03:07 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Downware.663
9.0.1.048

Malwarebytes
Adware.Downware
v2014.02.17.06

Reason Heuristics
PUP.Blekko.I
14.7.17.10

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.24.3

File size:
221.3 KB (226,632 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\blekkoic.exe

Digital Signature
Signed by:
Blekko, Inc.

Authority:
DigiCert Inc

Valid from:
4/3/2012 6:00:00 PM

Valid to:
6/10/2015 6:00:00 AM

Subject:
CN="Blekko, Inc.", O="Blekko, Inc.", L=Redwood City, S=California, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
04A6DE4CBB85009FDEB5922F181C5382

File PE Metadata
Compilation timestamp:
5/18/2012 12:42:56 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:kFT9/Q2F8XYdZ+Fyh8yG/JXgdhyZO9aUe0oFZIiZJIT9RJgV5NNwiSdVbI:MQ2FhZ+FyDGxXgdhys9avNcYITeVNwix

Entry address:
0x104EC

Entry point:
E8, 89, 7D, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C, EB, 07, 66, 3B, CA, 74, 11, 40, 40, 0F, B7, 08, 66, 85, C9, 75, F1, 66, 39, 10, 74, 02, 33, C0, 5D, C3, 6A, 10, 68, 80, B3, 42, 00, E8, 84, 22, 00, 00, 8B, 5D, 08, 85, DB, 75, 0E, FF, 75, 0C, E8, A1, F8, FF, FF, 59, E9, CC, 01, 00, 00, 8B, 75, 0C, 85, F6, 75, 0C, 53, E8, 6D, FD, FF, FF, 59, E9, B7, 01, 00, 00, 83, 3D, E0, 3D, 43, 00, 03, 0F, 85, 93, 01, 00, 00, 33, FF, 89, 7D, E4, 83, FE, E0, 0F, 87, 8A, 01, 00, 00, 6A...
 
[+]

Entropy:
6.1943

Code size:
143 KB (146,432 bytes)

Remove blekkoic.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.