BL pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BL pdf.exe
Size

632KB
MD5

7cc684ca97e43e20ca93f1bb2d157ffc
SHA1

6929e0d85a1a556995b91479d965897f6b3cf724
SHA256

1cc898867c64c4ce20a387a2f71487a27a91d84d272ee1b316dbabdb0dc2409f
SHA512

2632a5c294540e3f4c7d3fa8d13326d4af95cc625ff7e97a6a62fd9b34d1ea0f70abef80466caa7cd307f0a809f33fa1111118b2bf233f7b9fb54b2651da14b1
SSDEEP

12288:tWYJOsY6k3CR7XZ+wgZ/1g1InHnUkAbJD7aUw9CbzEi:wYJOsY6k3MEwSRnUkGJDyC0i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BL pdf.exe

Files

BL pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 612KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ