Behavioral task
behavioral1
Sample
fbc9e502aa88bedee58ae94703f7fdbf4bc2cd4b6a273d76f408bc2b593ce1df.exe
Resource
win7-20220812-en
General
-
Target
fbc9e502aa88bedee58ae94703f7fdbf4bc2cd4b6a273d76f408bc2b593ce1df
-
Size
366KB
-
MD5
a50ead5fee22bba67cfafc973649a220
-
SHA1
2eecd95ed962bce33f564971b76c463add9510f5
-
SHA256
fbc9e502aa88bedee58ae94703f7fdbf4bc2cd4b6a273d76f408bc2b593ce1df
-
SHA512
fc85d4310530e2aebd33fb169935aff98d125dab88d4f834f4ec6b5d0f63576989657fdc27f6a77dcbac3d68549ebf01076f8ba345749479bf91f0755c7964e1
-
SSDEEP
6144:MSfSHl+gv5gY1F53Aul/Egv4+E6qnwEGvIkJ7G9P1n:M2SHl+gv5gY1b5Eo4+EsEEIkJ7G9P1n
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon
Files
-
fbc9e502aa88bedee58ae94703f7fdbf4bc2cd4b6a273d76f408bc2b593ce1df.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 325KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE