BL For 4704854 4665930[.]rar | Triage

Sharing

General

Target

BL For 4704854 4665930.rar
Size

471KB
MD5

7622e5003f18d8202d3d3fae58f425db
SHA1

81fc4a0b67c5cd533b93d22ccb23015f8435811d
SHA256

40e26464a92f94b0e1f356f618326b4f3b3bdda7276f1392d8b8c65f4a04befe
SHA512

fb26ea7d4a320b745a717aac4bf2862eb2d89d0db6c2777bf365a8bdb849731521a8b3443428aef59b9359003192352d7dabaf38a9eec7c17f8de82b762c0a97
SSDEEP

12288:Jmyv6lUebz9LiXkjbM4z8tYpxJBm0rdTje6vv6BmrJ5Yl:JmDzli0j448tYpDBm0rdTjerB+H4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL For 4704854 4665930.exe

Files

BL For 4704854 4665930.rar
.rar
BL For 4704854 4665930.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ