General

  • Target

    BLTools.exe

  • Size

    6.5MB

  • MD5

    482d8a8c6d4f60c16b7ad5f2c335e2c9

  • SHA1

    17564a394111f88f336a655e90f8e4975c3935eb

  • SHA256

    2dd3b74a70bbd196a5680e2c830f9563a4ae5e0e51e0ed528ed5f4c8a227e37b

  • SHA512

    9d217b7c35fe5f455d956f23f1ebb128f965f767f53a521bfd1536c7beea4490d989c0b081c21eb32117d2558f246bc2e1ca8125306dcdb5a0e169f12e106780

  • SSDEEP

    98304:VusGrRJNZwVIBU0c6sahvALmnMxNnThxaNZNQgIZEQmUgylru04bWP1Re4f+wW:crrBUzEhvImnIxqZe7ZPpXubbWf+

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BLTools.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections