Get1
Get10
Get11
Get12
Get13
Get14
Get15
Get2
Get3
Get4
Get5
Get6
Get7
Get8
Get9
GetEP
SetData
Behavioral task
behavioral1
Sample
2473ba3b4be5b0b616a398f0e86b5629d6df2f13cbcf86a6bb5ebff94ff5be69.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2473ba3b4be5b0b616a398f0e86b5629d6df2f13cbcf86a6bb5ebff94ff5be69.dll
Resource
win10v2004-20230915-en
Target
2473ba3b4be5b0b616a398f0e86b5629d6df2f13cbcf86a6bb5ebff94ff5be69
Size
1.7MB
MD5
d0c0e6fb560a56e7fc619a3d88464187
SHA1
7da992c1ad7da5844c23f39fe9c5b1b0cf3cbb77
SHA256
2473ba3b4be5b0b616a398f0e86b5629d6df2f13cbcf86a6bb5ebff94ff5be69
SHA512
6592dc9765096d0a426b4bffe53f02b0a302d17e4be32335b1114c00a383c0cb7249d8005c6ed69daaa604ca1981678435caabede2e65b1e8d1368d933c65c33
SSDEEP
49152:RmGFdu8lFzN5pokgpHgKs8bMhwnjN3cKBA:9zFB7tursg7p3cKG
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
2473ba3b4be5b0b616a398f0e86b5629d6df2f13cbcf86a6bb5ebff94ff5be69 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetWaitableTimer
VirtualProtect
RtlMoveMemory
GetProcAddress
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
CreateWaitableTimerA
HeapFree
IsBadReadPtr
GetTickCount
GetCommandLineA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
LCMapStringA
CreateThread
HeapReAlloc
GetModuleHandleExA
CreateDialogIndirectParamA
UpdateWindow
SendMessageA
DestroyWindow
PostQuitMessage
wsprintfA
GetDlgItem
ShowWindow
SetWindowLongA
GetWindowRect
ScreenToClient
SetWindowPos
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
MsgWaitForMultipleObjects
SetWindowTextA
??2@YAPAXI@Z
__CxxFrameHandler
strncmp
memmove
modf
realloc
strchr
strrchr
atof
atoi
_ftol
sprintf
srand
free
malloc
_atoi64
??3@YAXPAX@Z
Get1
Get10
Get11
Get12
Get13
Get14
Get15
Get2
Get3
Get4
Get5
Get6
Get7
Get8
Get9
GetEP
SetData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ