Overview

overview

10

Static

static

10

e149a9655e...2c.dll

windows7-x64

10

e149a9655e...2c.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e149a9655e6a4610072c6f8007a73c41b0eb6ab191f4462e017bbbcbf2aa852c

  • Size

    220KB

  • MD5

    8ab66655ee12776ed6623374b189867d

  • SHA1

    4a95f51c1fd6e40f048d5f1f1e2d706258945c21

  • SHA256

    e149a9655e6a4610072c6f8007a73c41b0eb6ab191f4462e017bbbcbf2aa852c

  • SHA512

    718f5f5e1a8fb6cea2fe6cd460cba0991bc738b764de6a2e67695835e6ba5142e6588f094db4f1189fe0ce4e86351c321069037af4d533a8bb9a779ff733ac30

  • SSDEEP

    3072:HTUyVW5/4N8WO8ONauk886p/uoici/6NHn7EVLntr/+gT1n/s9QnvN2drR+6Y/uU:HTxkauD/Di/iiV/nU98EZZuo0g7p

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e149a9655e6a4610072c6f8007a73c41b0eb6ab191f4462e017bbbcbf2aa852c
    .dll windows x86

    c1c545c1a645bfb7cefb2b37f02b1c76


    Headers

    Imports

    Exports

    Sections