Behavioral task
behavioral1
Sample
42c2d8d62b43279fb1d5ac47289f110c83c15194fa98eb9bd338b2af88fb6095.exe
Resource
win7-20240319-en
General
-
Target
42c2d8d62b43279fb1d5ac47289f110c83c15194fa98eb9bd338b2af88fb6095.exe
-
Size
136KB
-
MD5
812b1b347e017a6ec4c70711a3021f8e
-
SHA1
5aa153e9ce0f8c53ea8e167caa627ce3830bf1a4
-
SHA256
42c2d8d62b43279fb1d5ac47289f110c83c15194fa98eb9bd338b2af88fb6095
-
SHA512
1d0788c931292d099a5e28c01b4d2cd527d7ef8d3616fd7efab9b1562d6741b3916fb6a3d77adbdcaf0d63fe88f55c0e49d619b2bde1dfac28acc5267e1a3dbb
-
SSDEEP
1536:Md+zUtBIBU+2Da4lH4Iiue58o/ZDv4GMfcHZIlVKAn5ZAcXeOqbZ6NjkgEX:OqSe5OmiEoAcCbZ6Dw
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42c2d8d62b43279fb1d5ac47289f110c83c15194fa98eb9bd338b2af88fb6095.exe
Files
-
42c2d8d62b43279fb1d5ac47289f110c83c15194fa98eb9bd338b2af88fb6095.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE