bukeni
jzrundll
jzrundll2
Behavioral task
behavioral1
Sample
623567250e6373fb4d6a7d6cce9e2ce07c4e12c761ab6e52d194e548e28c4e53.dll
Resource
win7-20231025-en
Target
623567250e6373fb4d6a7d6cce9e2ce07c4e12c761ab6e52d194e548e28c4e53
Size
948KB
MD5
edd91ace9faea448b57c9854909f8042
SHA1
3c26e863271bc9bb070dcaaa0866b25c66e58d98
SHA256
623567250e6373fb4d6a7d6cce9e2ce07c4e12c761ab6e52d194e548e28c4e53
SHA512
ca59a94761e385136e2b91f937f3b7ad12726f263d769f82859c0db5d5a26a7b31151321aa8646c9a0818b39d63d773db8741c50ab668826ffd101a446fc0457
SSDEEP
6144:av5F5Ze47m0g5DfQ6g+aE6o3MnHE6o3MnHE6o3MnHE6o3MnHE6o3MnfJ:av5FTL7mdQ6MEqEqEqEqE
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
623567250e6373fb4d6a7d6cce9e2ce07c4e12c761ab6e52d194e548e28c4e53 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bukeni
jzrundll
jzrundll2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE