blackguard | UMF[.]Installer[.]exe

Resubmissions

20/02/2024, 04:33

240220-e6v9vaba5w10

20/02/2024, 04:30

240220-e42c3sah9z10

20/02/2024, 04:20

240220-eyb61aag6y10

Sharing

Copy URL Twitter E-mail

General

Target
UMF.Installer.exe
Size 10.4MB
Sample240220-e6v9vaba5w
SHA256 c81e2a3b15785a5fb548c5552be839fd92e2fc5423b372fba2f890ad488371b9
MD5 5a7ecc12107019e47294f27f4d40572c
SHA1 01891d681fd8b6baa0599e335999d427e55179db
SHA512 77da7350f3cc4358e07250ee9c6cbd035a9a27a934c019967942841cbf3d49839cb765dc6a22bc121e34ef1494b33050dc5752beff5e1938b82848b3190d4ad1
SSDEEP 196608:DJ06wpSjt1RoahEDQH6TdBy5AY6TdVp/6TdvpPC:d0xpqloDQajPTpCppPC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UMF.Installer.exe

File Explorer

UMF.Installer.exe

.exe 10.4MB

UMF.Installer.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c81e2a3b15785a5fb548c5552be839fd92e2fc5423b372fba2f890ad488371b9
MD5 5a7ecc12107019e47294f27f4d40572c
SHA1 01891d681fd8b6baa0599e335999d427e55179db
SHA512 77da7350f3cc4358e07250ee9c6cbd035a9a27a934c019967942841cbf3d49839cb765dc6a22bc121e34ef1494b33050dc5752beff5e1938b82848b3190d4ad1
SSDEEP 196608:DJ06wpSjt1RoahEDQH6TdBy5AY6TdVp/6TdvpPC:d0xpqloDQajPTpCppPC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10642398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

UMF.Installer.exe

mscoree

dotnet