Behavioral task
behavioral1
Sample
1dadacedc01189e4fc33bfd593e9fd83a45a97f6429b2f80cd98fc1e2e02b983.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1dadacedc01189e4fc33bfd593e9fd83a45a97f6429b2f80cd98fc1e2e02b983.exe
Resource
win10v2004-20231023-en
General
-
Target
1dadacedc01189e4fc33bfd593e9fd83a45a97f6429b2f80cd98fc1e2e02b983
-
Size
460KB
-
MD5
514b91d173c2d6813d96ac8b2e604e7d
-
SHA1
69fe3fc3595c9b1ccd8c4fa9cfe783e546cbeabc
-
SHA256
1dadacedc01189e4fc33bfd593e9fd83a45a97f6429b2f80cd98fc1e2e02b983
-
SHA512
02809349da902812c48e1a538124b894b084ae5c30b10bbdb5a59c7973b91b215ecbad2d045047eba645134b6a390c6a37647adcfef82903f379a50f8e82a317
-
SSDEEP
12288:i0wsYMBMMMMNMMMMZMMMM9MMMMTMMMM+MMMMPMMMDMMMMWMMMM9MMMMXMMMpMMMQ:i0pYMBMMMMNMMMMZMMMM9MMMMTMMMM+W
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dadacedc01189e4fc33bfd593e9fd83a45a97f6429b2f80cd98fc1e2e02b983
Files
-
1dadacedc01189e4fc33bfd593e9fd83a45a97f6429b2f80cd98fc1e2e02b983.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE