HBL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HBL.exe
Size

884KB
MD5

95d5de0599b7595578992aeed2739ae6
SHA1

e7e49747b8c73c4a600a19d8883167c5d915014c
SHA256

cd7a27abbb0a951a92292c24dba7061bfaa676b720ecdfce33c84fda87971998
SHA512

3b1513b0cfb341f0fd42cfad36e4adaba545c24d80e8b058a55d72f4798d54d4eec13ddfdf336ffc767e6d1165e5a70aa94e5558f57ed9f17199e5bda3d4fa25
SSDEEP

24576:8ViMp0YMveHzVQAffEQxXJ1DggAGFhXuv:8I/veTVDEQx713j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HBL.exe

Files

HBL.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 728KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ