BLtools Pro[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

BLtools Pro.exe
Size

6.2MB
MD5

29c35e9bada5717b13128028c8c12f09
SHA1

087779e375a25c5facd910e15507b846534fb9a6
SHA256

7e45de670e24b66c4f98ba0fa730c3de99faf23c30d704f8267ed371e929a43e
SHA512

8f7734241e147f017b3731f5b5fde2ae81f34b173bb77bd77c371ddd17d18ae5f87b5415d9a2a89efb47797b9743af47dcc1ff90f4c21256c8864201eb8d591a
SSDEEP

98304:Sv57nmGX2zgIm0GKGNHhN7DiukGAfBJSXyOGpNP/z2saHl2K+oxGq2WO:W5lXA9m0GKGND73YjJP9rHoxGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BLtools Pro.exe

Files

BLtools Pro.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 937KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 937KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

."EM
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Nja
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.?nM
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

Size: - Virtual size: 1.8MB

Size: - Virtual size: 1.5MB

Size: - Virtual size: 67KB

Size: - Virtual size: 12B

.text Size: - Virtual size: 420B

.text Size: - Virtual size: 3B

.text Size: - Virtual size: 6KB

.text Size: - Virtual size: 3KB

.text Size: - Virtual size: 6KB

.text Size: - Virtual size: 937KB

.text Size: - Virtual size: 936KB

.text Size: - Virtual size: 937KB

."EM Size: - Virtual size: 2.0MB

.Nja Size: 512B - Virtual size: 8B

.?nM Size: 6.2MB - Virtual size: 6.2MB

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 512B - Virtual size: 24B

.text
Size: - Virtual size: 420B

.text
Size: - Virtual size: 3B

.text
Size: - Virtual size: 6KB

.text
Size: - Virtual size: 3KB

.text
Size: - Virtual size: 6KB

.text
Size: - Virtual size: 937KB

.text
Size: - Virtual size: 936KB

.text
Size: - Virtual size: 937KB

."EM
Size: - Virtual size: 2.0MB

.Nja
Size: 512B - Virtual size: 8B

.?nM
Size: 6.2MB - Virtual size: 6.2MB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 512B - Virtual size: 24B