����_��������
Behavioral task
behavioral1
Sample
834d599b940b3a6fd504e55b151cf767904b71ae39f3f10449c59f33b33b9f63.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
834d599b940b3a6fd504e55b151cf767904b71ae39f3f10449c59f33b33b9f63.dll
Resource
win10v2004-20230915-en
General
-
Target
834d599b940b3a6fd504e55b151cf767904b71ae39f3f10449c59f33b33b9f63
-
Size
876KB
-
MD5
d68ecae42298a594dd4f4c7267eba6d5
-
SHA1
476551ebd54ed91f2eed54df4de74f586c896ab0
-
SHA256
834d599b940b3a6fd504e55b151cf767904b71ae39f3f10449c59f33b33b9f63
-
SHA512
864041dfd80842f2d3937348c2aefb9e2b53ce80555a0596ea28756dfe3e6227afd4f9985c08d37d17cf6932f9a0eea091b2042323d0c0ca2393fa4c73c4fd64
-
SSDEEP
24576:sV0EVjq4vKnhOU775dLRg1IxnZWJ9iXgzQWw0I3+QmvH0Xd1Hp5Uf6t:sVywM+Qmwd1J6f
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 834d599b940b3a6fd504e55b151cf767904b71ae39f3f10449c59f33b33b9f63
Files
-
834d599b940b3a6fd504e55b151cf767904b71ae39f3f10449c59f33b33b9f63.dll windows:4 windows x86
bfd1643675eaa70336cb1e28770df16d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
CreateEventA
CloseHandle
WaitForMultipleObjects
OutputDebugStringA
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
SetEvent
InterlockedExchange
Sleep
InterlockedCompareExchange
ReadFile
CreateProcessA
GetStartupInfoA
CreatePipe
DeviceIoControl
CreateFileA
GetComputerNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetLastError
ResetEvent
GetVersion
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
RaiseException
DeleteFileA
GetCurrentProcess
GetSystemTimeAsFileTime
TlsAlloc
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
lstrcpyA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetFilePointer
LCMapStringW
HeapSize
UnhandledExceptionFilter
FlushFileBuffers
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
IsBadCodePtr
SetEndOfFile
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlFillMemory
WideCharToMultiByte
GetTickCount
GetModuleHandleA
GetProcAddress
RtlMoveMemory
GetProcessHeap
HeapAlloc
LocalSize
InterlockedIncrement
lstrcatA
MulDiv
TerminateProcess
InterlockedDecrement
HeapFree
lstrlenA
lstrlenW
lstrcmpA
lstrcmpiW
lstrcatW
MultiByteToWideChar
GetModuleHandleW
LCMapStringA
LoadLibraryA
FreeLibrary
GetModuleFileNameA
GetCommandLineA
GetUserDefaultLCID
IsBadReadPtr
HeapReAlloc
GetAtomNameW
ExitProcess
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpW
RtlZeroMemory
lstrcmpiA
HeapDestroy
HeapCreate
FreeEnvironmentStringsW
GetCommandLineW
GetModuleFileNameW
CreateThread
user32
GetMenuItemInfoW
AppendMenuW
InsertMenuW
SetMenuInfo
GetSubMenu
MessageBoxTimeoutA
GetMenuItemCount
GetMenuItemID
MsgWaitForMultipleObjects
GetWindowTextLengthA
MenuItemFromPoint
RemoveMenu
CheckMenuItem
SetMenuItemInfoW
DestroyMenu
GetMenuInfo
LoadMenuW
GetSystemMenu
CreatePopupMenu
CreateMenu
DrawIconEx
LoadImageW
CreateIconFromResourceEx
UpdateLayeredWindow
SystemParametersInfoW
RegisterWindowMessageW
DrawMenuBar
SetMenu
GetMenu
IsZoomed
IsIconic
SetRect
LoadIconW
EnumPropsExW
RemovePropA
RemovePropW
CheckMenuRadioItem
UnregisterHotKey
SetWindowLongA
SendMessageA
RegisterHotKey
LoadBitmapA
GetCursorPos
CreateWindowExA
CallWindowProcA
GetPropA
GetPropW
SetPropA
SetPropW
KillTimer
SetTimer
MessageBoxW
SetWindowTextW
SetParent
MoveWindow
UpdateWindow
SetMenuDefaultItem
ScreenToClient
GetIconInfo
CopyIcon
PostMessageW
ShowWindow
CallWindowProcW
SetForegroundWindow
DialogBoxParamW
CreateDialogParamW
EndDialog
DialogBoxIndirectParamW
DestroyWindow
SetClassLongW
GetClassLongW
CreateDialogIndirectParamW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
PostQuitMessage
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
TranslateMDISysAccel
IsChild
GetMessageW
GetFocus
InvalidateRect
ClientToScreen
GetWindowDC
DefWindowProcW
OffsetRect
ReleaseDC
DrawTextA
GetDC
SetFocus
GetNextDlgTabItem
FillRect
GetWindowRect
SetWindowPos
EnableWindow
IsWindowEnabled
IsWindowVisible
GetSysColor
DestroyAcceleratorTable
DestroyIcon
LoadCursorW
ReleaseCapture
SetCapture
SetCursor
LoadStringW
DestroyCursor
SendMessageW
GetWindowLongW
GetParent
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
FindWindowExW
GetAsyncKeyState
SetWindowLongW
GetAncestor
GetDlgItem
TrackMouseEvent
EndPaint
BeginPaint
SetWindowRgn
GetClientRect
GetSystemMetrics
MapVirtualKeyA
GetWindowInfo
IsWindow
GetWindowThreadProcessId
FindWindowA
GetWindowTextA
CharUpperW
CharLowerW
MessageBoxA
wsprintfA
TrackPopupMenu
GetMenuStringW
GetMenuItemRect
GetMenuState
CreateMDIWindowW
GetMenuDefaultItem
PeekMessageA
GetMessageA
ValidateRect
DispatchMessageA
shell32
DragQueryFileW
Shell_NotifyIconW
CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileA
comctl32
ord17
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_Add
ImageList_EndDrag
InitCommonControlsEx
gdi32
DeleteDC
SetTextColor
SetBkMode
SetBkColor
GetStockObject
CreateSolidBrush
CreateRoundRectRgn
GetObjectW
BitBlt
SelectObject
CreateDIBSection
GetStretchBltMode
SetStretchBltMode
StretchBlt
CreateEllipticRgn
CreatePatternBrush
GetDIBits
TranslateCharsetInfo
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
CreateFontA
DeleteObject
gdiplus
GdipAddPathArcI
GdipAddPathEllipse
GdipAddPathPie
GdipAddPathPolygon
GdipAddPathPath
GdipAddPathString
GdipTransformPath
GdipGetPathWorldBounds
GdipFlattenPath
GdipWidenPath
GdipWindingModeOutline
GdipWarpPath
GdipIsVisiblePathPoint
GdipIsOutlineVisiblePathPoint
GdipCreateRegionRect
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRgnData
GdipCloneRegion
GdipSetInfinite
GdipSetEmpty
GdipCombineRegionRect
GdipCombineRegionRegion
GdipCombineRegionPath
GdipTranslateRegion
GdipTransformRegion
GdipGetRegionBounds
GdipGetRegionDataSize
GdipGetRegionData
GdipGetRegionHRgn
GdipIsEmptyRegion
GdipIsInfiniteRegion
GdipIsEqualRegion
GdipIsVisibleRegionPoint
GdipIsVisibleRegionRect
GdipGetRegionScansCount
GdipGetRegionScans
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCloneMatrix
GdipSetMatrixElements
GdipGetMatrixElements
GdipMultiplyMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipInvertMatrix
GdipScaleMatrix
GdipShearMatrix
GdipTransformMatrixPoints
GdipVectorTransformMatrixPoints
GdipIsMatrixInvertible
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCloneBitmapArea
GdipBitmapGetPixel
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipCreateSolidFill
GdipAddPathLineI
GdipAddPathRectangle
GdipAddPathClosedCurve2
GdipAddPathClosedCurve
GdipAddPathCurve2
GdipAddPathCurve
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipGetPathLastPoint
GdipReversePath
GdipClearPathMarkers
GdipSetPathMarker
GdipClosePathFigures
GdipClosePathFigure
GdipCreateTexture
GdipFillRectangle
GdipDeleteBrush
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipDisposeImage
GdipDeleteFont
GdiplusStartup
GdipDeletePath
GdipDeleteRegion
GdipStartPathFigure
GdipGetPathData
GdipGetPointCount
GdipSetPathFillMode
GdipGetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath2
GdipCreatePath
GdipGetImageGraphicsContext
GdipCreateFromHWND
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateHICONFromBitmap
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageThumbnail
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageBounds
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipCloneImage
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipEndContainer
GdipBeginContainer2
GdipBeginContainer
GdipRestoreGraphics
GdipSaveGraphics
GdipIsVisibleRect
GdipIsVisiblePoint
GdipIsVisibleClipEmpty
GdipIsClipEmpty
GdipGetVisibleClipBounds
GdipGetClipBounds
GdipGetClip
GdipResetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipSetClipRect
GdipSetClipPath
GdipSetClipGraphics
GdipDrawImagePointsRect
GdipDrawImagePointRect
GdipDrawImagePoints
GdipDrawImageRect
GdipDrawImageRectRect
GdipDrawImage
GdipDrawDriverString
GdipMeasureCharacterRanges
GdipCreateRegion
GdipMeasureString
GdipDrawString
GdipFillRegion
GdipFillClosedCurve2
GdipFillClosedCurve
GdipFillPath
GdipFillPie
GdipFillEllipse
GdipFillPolygon
GdipGraphicsClear
GdipDrawLineI
GdipDrawArcI
GdipDrawClosedCurve2
GdipDrawClosedCurve
GdipDrawCurve2
GdipDrawCurve
GdipDrawPath
GdipDrawPolygon
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipDrawArc
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetDpiY
GdipGetDpiX
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDeleteMatrix
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipReleaseDC
GdipGetDC
GdipFlush
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesWrapMode
GdipSetImageAttributesRemapTable
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesColorKeys
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesThreshold
GdipResetImageAttributes
GdipSetImageAttributesToIdentity
GdipCloneImageAttributes
GdipCreateImageAttributes
GdipGetFontHeightGivenDPI
GdipGetFontHeight
GdipGetFontUnit
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipGetLogFontA
GdipGetLogFontW
GdipCreateFromHDC
GdipCloneFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipDeletePrivateFontCollection
GdipCreateFontFromLogfontW
GdipCreateFont
GdipTranslateClip
atl
ord42
shlwapi
wvnsprintfW
StrToIntW
StrTrimW
PathFindFileNameW
PathRemoveFileSpecW
StrToIntExW
uxtheme
SetWindowTheme
crypt32
CryptStringToBinaryW
msimg32
AlphaBlend
ole32
CoUninitialize
CoInitialize
CLSIDFromString
GetHGlobalFromStream
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
VariantTimeToSystemTime
advapi32
ReportEventA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegisterEventSourceA
DeregisterEventSource
ws2_32
gethostbyname
WSACleanup
closesocket
htonl
WSAStartup
ntohl
shutdown
connect
htons
setsockopt
WSAGetLastError
WSASocketW
WSASend
WSARecv
Exports
Exports
Sections
.text Size: 688KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ