Packing List and BL[.]exe | Triage

Sharing

General

Target

Packing List and BL.exe
Size

733KB
MD5

78443c88f20906f05517923998a05d87
SHA1

dfa838506964fd8439e3a909f9aef4a48e1f85a1
SHA256

905491ddc53af3036d1c6a61dd010ab242b5ac40d093a77eb5c3b9f1be83333a
SHA512

26fa1bed30b73656e15375f8fc20661ca341faa8b029a4931929e8e8a433c06b2aa8d129c5b0b27a715a6a531ec1b32834ce1e65fe42f09a9dac7444acfff8cd
SSDEEP

12288:6fopAMTihh6xhZ6OriJ3UvXhiL3HW+e4QOlpnR3vdqq5ahXP/wl11Tame7KfGj:jKMUgh8yiOv+BerOllBdqCuwl/+9K+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Packing List and BL.exe

Files

Packing List and BL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ