BLTools v2[.]7[.]2 Pro[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BLTools v2.7.2 Pro.exe
Size

3.4MB
MD5

b6accab723ca675c18544f2640cabce8
SHA1

066ee4ec9fe7eb3520543797878ba6b77148010f
SHA256

1ddbbe124a321ba8c769295cf91ed5a2ddfd4669da9f1bb95907a30120b1c2a1
SHA512

ec4797aad8f6250be0ac1903231c2f8eb1ec03b1650ba69b81df5fc9d80842ff8fbfebe8d25539f9c14fa2a898fff04965fe5748f01be90b4aadf869e7a5e0c2
SSDEEP

49152:VMByOj9Ss24R0wFhlMv6DSdsHXgzSq0Xll2JEW38Y2WUC:Vyj9Sl4R0wFrNDSGH8Kll2KWtjUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BLTools v2.7.2 Pro.exe

Files

BLTools v2.7.2 Pro.exe
.exe windows:4 windows x86 arch:x86

Password: 11223

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ