AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
General
-
Target
ca3c6aa65d838e2164af3b43a370e35dadd96938d8da0347cffe30cfa19cb3f3
-
Size
388KB
-
MD5
ecf19f0bf9c70411090c8eb0a41e2610
-
SHA1
0c2dffa44ce0c6509552fcf6229f95a0005da04e
-
SHA256
ca3c6aa65d838e2164af3b43a370e35dadd96938d8da0347cffe30cfa19cb3f3
-
SHA512
248552dbb4ac1b416f64268468e853e32dd98abd2b7ae0e871bd57351c7300d1a08713e43866064c58354554456858b6b64cc7a143468df9b6b1e9e4f21e2620
-
SSDEEP
12288:MfsbeGMhyqFiRvgGS3yb4jzVI5NeByews8r7W:csb8qvgGS9nVIveByews83W
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
Files
-
ca3c6aa65d838e2164af3b43a370e35dadd96938d8da0347cffe30cfa19cb3f3
-
lolyhzs_veryhuo.com/Copy
Headers
Exports
Sections
-
out.upx
Headers
Sections
-
lolyhzs_veryhuo.com/LOL优化助手1.6.exe
Headers
Sections
-
lolyhzs_veryhuo.com/SKT.dll
4a39e50d0bfa78f5e2bb70342ba22809
Headers
Imports
Exports
Sections
-
lolyhzs_veryhuo.com/process.exe
Headers
Sections
-
lolyhzs_veryhuo.com/更新日志.txt
-
lolyhzs_veryhuo.com/最火软件站.url
-
lolyhzs_veryhuo.com/软件说明.txt