Static task
static1
Behavioral task
behavioral1
Sample
BL_DRAFT.exe
Resource
win7-20220414-en
General
-
Target
BL_DRAFT.EXE
-
Size
656KB
-
MD5
7fbb62fafae5738f6352d111615e6603
-
SHA1
b9ef4b543caa94ffaa048c172c9c1057b0e5bfa2
-
SHA256
23c4426e903f6582e520db422c88f2c9d9625a03c9c5afc5851ef858185fba7d
-
SHA512
a9ce455f0322780ab6adbbbdd7bf02c775de06ebb7ecd839b36ced8c95d244728cb84923c34186ea597fab8e701c7beb5d1d662333adaf5bd533a927c54f0aa0
-
SSDEEP
12288:oh2iNZEn27lG1ZbP292lcLf/WCXiI+Rqa73F1a79kHDlt:Q1vjQi92au73W72
Malware Config
Signatures
Files
-
BL_DRAFT.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 654KB - Virtual size: 654KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ