bsvdfq
qewfqwd
rgesada
sdcasd
vsdcxds
Behavioral task
behavioral1
Sample
cbedc1d1ec22ddae21cce3ac3f3c9969.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cbedc1d1ec22ddae21cce3ac3f3c9969.dll
Resource
win10v2004-20240226-en
Target
cbedc1d1ec22ddae21cce3ac3f3c9969
Size
244KB
MD5
cbedc1d1ec22ddae21cce3ac3f3c9969
SHA1
5b155107aff8683eba1b9e5d618dfa9ea2866281
SHA256
859fd4db26b191c3de62c12f22f311bc0778cbf20c1deaf71154e31023b86e41
SHA512
b7ec6e72750c9eb8996b68a9829cda3ef687263ec63a31a5845fe1cfbc850cc8e26a41b16cbabc5394ed6d02ddb8539abb40d0bd8bc2a7f9409d828bc5821de4
SSDEEP
6144:LmN/wQuTH/v7iO2+CrRCR/PCI2FoWRJCNT:LmN/buACR/hWRJCl
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
cbedc1d1ec22ddae21cce3ac3f3c9969 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bsvdfq
qewfqwd
rgesada
sdcasd
vsdcxds
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ