blackguard | b9d067083d34010cfe5968ada21bcbf7308437dc3310a9083d57b57b39dabccc | Triage

Sharing

General

Target

b9d067083d34010cfe5968ada21bcbf7308437dc3310a9083d57b57b39dabccc
Size

151KB
MD5

df25e640aeb41848bd1cdba91fb3a5ea
SHA1

60a013f137eb9ef77dd69eb0e657a36593c639f1
SHA256

b9d067083d34010cfe5968ada21bcbf7308437dc3310a9083d57b57b39dabccc
SHA512

9eaf5dbdb3d9cc31919d96475a4b8250959af2fa190db452c8fcb0a7b0b381451bd15ccd5d879b18e9d9cddb9efc0fa9559e9f3e006701177ecca75fd8384d64
SSDEEP

3072:pTBBk4ckjaewYXsnPATyPPu/B+wLpVkrAeRc1Q:pdBca4ITyPkpo7

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d067083d34010cfe5968ada21bcbf7308437dc3310a9083d57b57b39dabccc

Files

b9d067083d34010cfe5968ada21bcbf7308437dc3310a9083d57b57b39dabccc
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ