Behavioral task
behavioral1
Sample
09b5debc4bd0e7760ba7bf6faa93268285cafa004608fe2735cba1b6eb0836a2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
09b5debc4bd0e7760ba7bf6faa93268285cafa004608fe2735cba1b6eb0836a2.exe
Resource
win10v2004-20230915-en
General
-
Target
09b5debc4bd0e7760ba7bf6faa93268285cafa004608fe2735cba1b6eb0836a2
-
Size
823KB
-
MD5
b255c4c0c3379db4b2afe207c90aad92
-
SHA1
1b746283ad6e2a538048526d6bfe2ca044cc7963
-
SHA256
09b5debc4bd0e7760ba7bf6faa93268285cafa004608fe2735cba1b6eb0836a2
-
SHA512
067c05f1ba932e4658856afe4013eb4b30a0a3e7559cb52c481bc975e69903c06ebabd44cc89ce6e821cb4bf746216e23177ca98c975f1a0bd18328f217e3ec3
-
SSDEEP
24576:iGiZm/gubF8j51far6VJ+xcVW9zh7afqxs1OVTcsBvwnmkvqPo0lTs:i8/LLZrlTs
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09b5debc4bd0e7760ba7bf6faa93268285cafa004608fe2735cba1b6eb0836a2
Files
-
09b5debc4bd0e7760ba7bf6faa93268285cafa004608fe2735cba1b6eb0836a2.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 726KB - Virtual size: 726KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ