AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
baa6c9da5b502377205f6f9531afecba5f56e7977ea547e521aca7174d260909.dll
Resource
win7-20231023-en
Target
baa6c9da5b502377205f6f9531afecba5f56e7977ea547e521aca7174d260909
Size
500KB
MD5
d39fd459b42b0807fb0388833305c00d
SHA1
2193dc7415dcfc3ba64c7d630a3addd557db1e10
SHA256
baa6c9da5b502377205f6f9531afecba5f56e7977ea547e521aca7174d260909
SHA512
80376f28e47ac4f196fd6da8f6aa0ec17e400e1e809bbc9ec0ccca0c1ba812ff40a7a05e2e59d081d472bae05c8984418b940283d6c78a41ae88a218ec072b1b
SSDEEP
12288:ufxf2hROSRDLR5nWFpPoSNeN2XoSFv692ezH+bw:ufBoROs6bveUjv692eEw
Processes:
resource | yara_rule |
---|---|
sample | family_blackmoon |
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
baa6c9da5b502377205f6f9531afecba5f56e7977ea547e521aca7174d260909 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE