Behavioral task
behavioral1
Sample
b8247ba9b888343b05b23b0278e26cd35707f993239e76b3a3db85693a8d23e6.exe
Resource
win7-20220901-en
General
-
Target
b8247ba9b888343b05b23b0278e26cd35707f993239e76b3a3db85693a8d23e6
-
Size
1.6MB
-
MD5
02e7a65518de4502cb7890043a8614e5
-
SHA1
8e151f5fe4fb73670cabffa643edb7da94baa684
-
SHA256
b8247ba9b888343b05b23b0278e26cd35707f993239e76b3a3db85693a8d23e6
-
SHA512
cde580dcf9ce2317ccc86b1fa32a90f9984897088ae1d9f47a9fdd071a2eabacb12be257fcc3422b9ab663bb3cac7385a11dfb59ed6b67952d389bc4fe1dca26
-
SSDEEP
49152:/SWqY3N4aEFvLbE1Zff43gGt5wItOQqqaOwfp:KWq8N4NltnOh
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon
Files
-
b8247ba9b888343b05b23b0278e26cd35707f993239e76b3a3db85693a8d23e6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�5�i0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�5�i1 Size: 436KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�5�i2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE