Behavioral task
behavioral1
Sample
8f85604ebc2008e7b219cbeaab7891c31900d178fdb4ad26da9baf9438ca74d2.exe
Resource
win7-20221111-en
General
-
Target
8f85604ebc2008e7b219cbeaab7891c31900d178fdb4ad26da9baf9438ca74d2
-
Size
1.2MB
-
MD5
a3d5b056d99248dc8ccf50e2d08b77e3
-
SHA1
31196f81291ac0ac8805b8f55a1c595b8f7ea58e
-
SHA256
8f85604ebc2008e7b219cbeaab7891c31900d178fdb4ad26da9baf9438ca74d2
-
SHA512
8d204d2a28e7882569b5e5a9ce636a9a23984a1e015586223bed3e4460b86e65b188dac89d32ed479068b66de27816a29d11a52fb47cc5d1d069c1614e11290a
-
SSDEEP
24576:kfsDyuX5UCS4lny4IysRFbRU2nk7s1AGZtxwk:k01Xw4ZFIy6U2QgAotGk
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon
Files
-
8f85604ebc2008e7b219cbeaab7891c31900d178fdb4ad26da9baf9438ca74d2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�@ 0 Size: 908KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�@ 1 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�@ 2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE