Behavioral task
behavioral1
Sample
625a6506355f0376d31bf0eb5618993ccc46b966a6ff3f072025b69ba380feba.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
625a6506355f0376d31bf0eb5618993ccc46b966a6ff3f072025b69ba380feba.dll
Resource
win10v2004-20231215-en
General
-
Target
625a6506355f0376d31bf0eb5618993ccc46b966a6ff3f072025b69ba380feba
-
Size
1.6MB
-
MD5
831a7f10fecae014cd93cd980c88714d
-
SHA1
a545817af1e9c727b3ad9e07cbc828ca85fe697f
-
SHA256
625a6506355f0376d31bf0eb5618993ccc46b966a6ff3f072025b69ba380feba
-
SHA512
f3e5728a63714608b54b3e6768e4cf831b58e60c7345e8b1d2651d88cf86636cd5fbcd3a4d666011b974395074401e5fa7c8d04d223bd4c5e21a5403b0dede91
-
SSDEEP
24576:m18U8h8I8I8I8I8I8I8I8I8I8I8q8A8E:m18U8h8I8I8I8I8I8I8I8I8I8I8q8A8
Malware Config
Signatures
-
Blackguard family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 625a6506355f0376d31bf0eb5618993ccc46b966a6ff3f072025b69ba380feba
Files
-
625a6506355f0376d31bf0eb5618993ccc46b966a6ff3f072025b69ba380feba.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ