Packing List and BL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Packing List and BL.exe
Size

701KB
MD5

cc3978f671dda966674c941cf21df293
SHA1

228eb6ca5e07f49747d3d3198020d54440b91dbf
SHA256

3b3d92018cb4be5a3223c8b556bb8a1c817e0cbc2188b6500cbc2d4dd6d13658
SHA512

d4e9cacc67a92f720fc255578de0d7c56a910b0e99ce394c9cc6bbfd7ba6807416f9a3db63603fba39197d659a894e35a3450959a50a59ef4057fe505596c3f8
SSDEEP

12288:1MAMTihh6xhZ6Orhfexega/PzkwXe42WegArTQPY0cdowNRD:pMUgh8yhQRaQwOIYUBgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Packing List and BL.exe

Files

Packing List and BL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ