BL[.]exe | Triage

Sharing

General

Target

BL.exe
Size

222KB
MD5

15e15900328616144d406a9555d29381
SHA1

f72f15a6b6f5fb43806f383177242b0a930aa2b7
SHA256

cbc8fcdf10136e947c68cc5cc2b55364ef04a30c92c4b875cc194a675b322ec7
SHA512

069e91db25bfc03be79b5a2190589b903b1b6cc48ef2957c353111444a4cb9fb46665df8076a1949fe214d6b258654dd15c60d9be7be10434dbd57daacc1a8fb
SSDEEP

6144:xRYpSXH459O6ghklF0Z6vUbB/n1q+LqzEw:xRYp8HYTghkLg6viv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BL.exe

Files

BL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ