run
Behavioral task
behavioral1
Sample
9504090129fda96e77507fc6dea4db7c2b311689ead6dc32584423e630eb98c2.dll
Resource
win7-20220812-en
General
-
Target
9504090129fda96e77507fc6dea4db7c2b311689ead6dc32584423e630eb98c2
-
Size
80KB
-
MD5
eb82319c5e449c4b5f951fd00a4c1066
-
SHA1
34c59313d4bd10741098b5f58219edb14c4b2496
-
SHA256
9504090129fda96e77507fc6dea4db7c2b311689ead6dc32584423e630eb98c2
-
SHA512
1d37c4c93949e0159f2b76e6c83450cd40a3e1cfc08ee4b3da9d27806924789674e1d2fca605e3f540c331dac6e60a35bd0cd761552c7bc173cb9ced3e5ed657
-
SSDEEP
768:8doF/PjJaIm//39QqUHBNadrOa2edb9HmZELLsdbIWRWeFWxZ:fDm/P9xUH6drn2edb9G4iSxZ
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon
Files
-
9504090129fda96e77507fc6dea4db7c2b311689ead6dc32584423e630eb98c2.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
��>0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��>1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��>2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE