Overview

overview

10

Static

static

10

1c5aee71d1...52.exe

windows7-x64

10

1c5aee71d1...52.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c5aee71d1c756b81e6d0100e52a0f8f647b3df2f8dd5c6b470682f9c87f3f52

  • Size

    3.6MB

  • MD5

    241ab0e71e4ec5ae6673ec1994bd03cf

  • SHA1

    27319697265e8bc1f708200b971740cfe4b72739

  • SHA256

    1c5aee71d1c756b81e6d0100e52a0f8f647b3df2f8dd5c6b470682f9c87f3f52

  • SHA512

    7435f9c0639cba747805fe1dc2c792eafbb56ef1f650f379aa4e8d2825c59bedb05f1f2d6496638a0e9b44bb14bb24afa116edcbad10ef63a22d269dfb052c7b

  • SSDEEP

    98304:gezH2FaD+S8tAM3/bXOmsVVsDcJ4Ai1YdQwpDaFJmle3qyNoMY7GB:lH2sd8tAMD+XvfC1oQADoH3tNoMv

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c5aee71d1c756b81e6d0100e52a0f8f647b3df2f8dd5c6b470682f9c87f3f52
    .exe windows x86

    d9a81f9ae46e3133503fd8997dea5385


    Headers

    Imports

    Sections