Behavioral task
behavioral1
Sample
4fbb47a9bfc2ca314d9b23f39a2069f2d39c3ae0b1e4ad89827cc7e88b6cd3ad.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4fbb47a9bfc2ca314d9b23f39a2069f2d39c3ae0b1e4ad89827cc7e88b6cd3ad.exe
Resource
win10v2004-20230703-en
General
-
Target
4fbb47a9bfc2ca314d9b23f39a2069f2d39c3ae0b1e4ad89827cc7e88b6cd3ad
-
Size
484KB
-
MD5
01fc1e9b6e31bd5db3b1a056caf296a8
-
SHA1
4cfd4f3d17704d46bccae7bf949572ba405de0f9
-
SHA256
4fbb47a9bfc2ca314d9b23f39a2069f2d39c3ae0b1e4ad89827cc7e88b6cd3ad
-
SHA512
375054874d90b4068ffb3db6fce91d2d1481704dcea6473d9eb719d1f6294699e41577f461af81d85292ede73248ad62fda255533b8ceac34d559c11d81ff8b8
-
SSDEEP
12288:5fa/im94BRwypCs7eIf+m/ezlJNGc+pAJ:5M1947wYCs7D+m/kzN+iJ
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fbb47a9bfc2ca314d9b23f39a2069f2d39c3ae0b1e4ad89827cc7e88b6cd3ad
Files
-
4fbb47a9bfc2ca314d9b23f39a2069f2d39c3ae0b1e4ad89827cc7e88b6cd3ad.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 405KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ