BL3SaveEditor-Portable[.]zip | Triage

Sharing

General

Target

BL3SaveEditor-Portable.zip
Size

3.2MB
MD5

6a34c490d191bea8ccce8b20affb429b
SHA1

3aa61f9adcf97f01527fe27400a2a9eacc22386b
SHA256

ba0f09f187864caf04d8b99d1fa5b2fb0cc5af6b6db72007683c339f3bb3546b
SHA512

d3e5fc55f21c89ba9d0883848565ef7fd9435c7c163ef6c0c2d99ba7c24596aaa7850f10e50c114e9a57fafd663a370e6299cae9810b04ee829f97027de63958
SSDEEP

98304:CzopAiU3va2hrN9UJo9C82oUiZtYF82HUSIZO/Ga3lS:OLaHoJjUcaHIf+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL3SaveEditor.exe

Files

BL3SaveEditor-Portable.zip
.zip
BL3SaveEditor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ