Draft BL[.]z | Triage

Sharing

General

Target

Draft BL.z
Size

797KB
MD5

14cb2b1ed7fcd9e3f9d1ff8e6056efac
SHA1

27bf45c6333465609f560d99639a78ad48d257cd
SHA256

b1bfefffd758eb6a51517edbd4df1ec4494519e35d06a2f411b106c85e9066e9
SHA512

fb1eab2a4f77ffef5f18c0303c93bf2d208aed87d933bbbd2018e8e877e9f5fa7a6bb5902bc2fedcf065f4de3dc81291507f9cd2be8eea6f7ab55d791901bde0
SSDEEP

12288:7QRrmyz1H/mrl/VKE5+4WgLnyfySfgHDMDHLHrFfRZlu3NqTQh/bQAj+h8x:7fS0ISZs/LFJuNqo/W8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Draft BL.exe

Files

Draft BL.z
.rar
Draft BL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 820KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ