Behavioral task
behavioral1
Sample
cadc90f5d3e05ed336f7510f223f9aec.exe
Resource
win7-20240221-en
General
-
Target
cadc90f5d3e05ed336f7510f223f9aec
-
Size
1.2MB
-
MD5
cadc90f5d3e05ed336f7510f223f9aec
-
SHA1
22b479166871070093792cf54bf77632e3e2dafc
-
SHA256
3e8513af5ab156ab7a0263acd4d395719f6b71035517d70e29b9b43a4aa002d6
-
SHA512
1cf93bf34c28ab9fdedfa849d83429e04f255c35592e66295a4f11e5e915e33e24417a30349e76a897b8cac52410c4d6aa5e9330e4c206e95cc29b3b38196370
-
SSDEEP
24576:EfsDyuX5UCS4lny4IysRFbRU2nk7s1AGZtxwk:E01Xw4ZFIy6U2QgAotGk
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cadc90f5d3e05ed336f7510f223f9aec
Files
-
cadc90f5d3e05ed336f7510f223f9aec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��$0 Size: 908KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��$1 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��$2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE