Behavioral task
behavioral1
Sample
2775db94a3e46cb916d7b1131f98a7de.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2775db94a3e46cb916d7b1131f98a7de.exe
Resource
win10v2004-20231201-en
General
-
Target
2775db94a3e46cb916d7b1131f98a7de
-
Size
629KB
-
MD5
2775db94a3e46cb916d7b1131f98a7de
-
SHA1
dc2e65ebe3c9044084fdd5ca7008a27d2bc41ec7
-
SHA256
2c7bdd5fa4f0965b79ae8d172494aacd16a0313532ce6ae08a3d3eec7ece8c89
-
SHA512
6b6a63c7ba4a2cc2b34997814a5f90988a359cbce2d0c8f4e873b80e782121a5edcd7a1fc803e1bb48f6ec27f1300e8479853a8b488457ff7d691685f4abef02
-
SSDEEP
6144:f7GDE0V8Fyqx5BD95Mvi5ISUFGmgPmOjeCMoZ7BiFsUX:fyDEo8YqtD46IJFGUWeodiFs
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2775db94a3e46cb916d7b1131f98a7de
Files
-
2775db94a3e46cb916d7b1131f98a7de.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 164KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE