Behavioral task
behavioral1
Sample
03ab6ec9ecb0fa936187c64fe187365c653f6261d5d8f72b60fae3c80aff9054.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03ab6ec9ecb0fa936187c64fe187365c653f6261d5d8f72b60fae3c80aff9054.exe
Resource
win10v2004-20240226-en
General
-
Target
03ab6ec9ecb0fa936187c64fe187365c653f6261d5d8f72b60fae3c80aff9054
-
Size
5.9MB
-
MD5
1637007d417bffa50e51bd82572bc730
-
SHA1
a38924da90986693514837381a26e5296a85c668
-
SHA256
03ab6ec9ecb0fa936187c64fe187365c653f6261d5d8f72b60fae3c80aff9054
-
SHA512
8a2bb2188c534361ba5f1b55ae453c010bd108d02f6e18f5d8f8efce74bf8692918c8459c394da571ceadbf8455ce51cfc153977163a5e5fec1dfb6be6b72050
-
SSDEEP
49152:KZbDh9vriNOM7rbQ4Anm4BhfJgIW5NkZsQyRjOyWDfrRQxZzpGF:2Hh2rbQFBpDCy6jOjDVkzpa
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03ab6ec9ecb0fa936187c64fe187365c653f6261d5d8f72b60fae3c80aff9054
Files
-
03ab6ec9ecb0fa936187c64fe187365c653f6261d5d8f72b60fae3c80aff9054.exe windows:4 windows x86 arch:x86
7d883c00ed972f992dabc89afd3a088c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
lstrcmpiW
lstrcatW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
GetModuleHandleW
GetCommandLineW
LocalSize
GetTempPathA
GetWindowsDirectoryA
GetModuleHandleA
LocalFree
InterlockedCompareExchange
VirtualQuery
InterlockedExchange
SetEnvironmentVariableA
GetModuleFileNameW
CompareStringA
IsBadCodePtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
LCMapStringW
IsBadWritePtr
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
GetACP
RaiseException
GetSystemTime
RtlUnwind
GetOEMCP
GetCPInfo
SetErrorMode
GetProcessVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetStringTypeExA
FlushFileBuffers
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetVersion
GetTimeZoneInformation
FindResourceA
LoadResource
LockResource
SizeofResource
GetAtomNameW
MulDiv
HeapCreate
HeapDestroy
RtlZeroMemory
lstrcmpW
ExitProcess
HeapReAlloc
IsBadReadPtr
GetModuleFileNameA
Sleep
ReadFile
GetFileSize
CreateFileA
GetDriveTypeA
GetVersionExA
GetLastError
DeleteCriticalSection
DeleteFileA
WriteFile
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
LCMapStringA
FreeLibrary
GetCommandLineA
GetUserDefaultLCID
MoveFileA
GetStartupInfoA
CreateProcessA
CopyFileA
GetPrivateProfileStringA
FindFirstFileA
RemoveDirectoryA
FindNextFileA
FindClose
GetCurrentDirectoryA
GetDiskFreeSpaceExA
CreateDirectoryA
WritePrivateProfileStringA
GetTickCount
CompareStringW
SetFilePointer
LocalAlloc
lstrcmpiA
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
TerminateProcess
WaitForSingleObject
VirtualAllocEx
lstrcatA
SetLastError
GetSystemDirectoryA
lstrcpyA
LoadLibraryExA
EnumResourceNamesA
ResumeThread
RtlFillMemory
lstrlenA
VirtualFree
lstrcpynA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
VirtualProtectEx
GetProcAddress
LoadLibraryA
GetLocalTime
HeapFree
InterlockedDecrement
InterlockedIncrement
RtlMoveMemory
HeapAlloc
GetProcessHeap
OpenProcess
GetCurrentProcess
CloseHandle
WriteProcessMemory
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
IsWow64Process
GetComputerNameA
GetCurrentProcessId
shlwapi
PathFileExistsA
PathIsDirectoryA
PathRemoveFileSpecW
PathFindFileNameW
StrTrimW
StrToIntW
wvnsprintfW
StrToIntExW
ws2_32
inet_ntoa
WSAAsyncSelect
gethostbyname
WSACleanup
WSAStartup
inet_addr
closesocket
connect
htons
getsockname
ioctlsocket
ntohs
WSASocketA
WSAIoctl
select
recv
send
setsockopt
user32
IsWindow
FindWindowExW
GetClassNameW
GetWindowTextLengthW
GetWindowTextW
GetParent
GetWindowLongW
SendMessageW
SetCursor
GetClientRect
SetCapture
ReleaseCapture
LoadCursorW
DestroyAcceleratorTable
GetSysColor
IsWindowVisible
IsWindowEnabled
EnableWindow
SetWindowPos
GetWindowRect
InvalidateRect
MapWindowPoints
GetCursorPos
ScreenToClient
SetRect
DrawFocusRect
SetWindowRgn
DrawFrameControl
GetNextDlgTabItem
SetFocus
CallWindowProcW
CreateIconFromResourceEx
LoadImageW
LoadIconW
CopyIcon
DrawIconEx
GetFocus
GetMessageW
IsChild
TranslateMDISysAccel
TranslateAcceleratorW
IsDialogMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CreateDialogIndirectParamW
GetClassLongW
SetClassLongW
DestroyWindow
DialogBoxIndirectParamW
EndDialog
CreateDialogParamW
DialogBoxParamW
CreateMDIWindowW
DefWindowProcW
ShowWindow
PostMessageW
PostThreadMessageA
UnregisterClassA
LoadStringA
GetSysColorBrush
LoadIconA
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMessageTime
GetMessagePos
GetWindowPlacement
SendDlgItemMessageA
GetDlgCtrlID
CreateDialogIndirectParamA
UnhookWindowsHookEx
GrayStringA
GetAsyncKeyState
ClientToScreen
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
GetKeyState
CallNextHookEx
SetWindowsHookExA
GetLastActivePopup
GetActiveWindow
GetForegroundWindow
ChangeDisplaySettingsA
PtInRect
SystemParametersInfoA
ValidateRect
UpdateWindow
MoveWindow
SetParent
SetWindowTextW
MessageBoxW
SetWindowLongW
GetAncestor
GetDlgItem
SetTimer
KillTimer
SetPropW
SetPropA
GetPropW
GetPropA
RemovePropW
RemovePropA
EnumPropsExW
IsIconic
IsZoomed
GetSystemMetrics
GetMenu
SetMenu
DrawMenuBar
RegisterWindowMessageW
SystemParametersInfoW
CallWindowProcA
DefWindowProcA
DefMDIChildProcA
LoadCursorA
SetWindowLongA
CreateWindowExA
SendMessageA
GetWindowLongA
GetClassNameA
PostMessageA
SetWindowTextA
GetClassLongA
SetClassLongA
FillRect
DrawTextA
CopyImage
RegisterClassExA
InvertRect
RegisterWindowMessageA
RegisterHotKey
GetMessageA
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
SetActiveWindow
CreateMenu
CreatePopupMenu
GetSystemMenu
LoadMenuW
GetMenuInfo
DestroyMenu
GetMenuItemCount
GetMenuItemInfoW
AppendMenuW
InsertMenuW
SetMenuInfo
GetSubMenu
GetMenuItemID
CheckMenuRadioItem
SetForegroundWindow
TrackPopupMenu
GetMenuStringW
GetMenuItemRect
GetMenuState
GetMenuDefaultItem
MenuItemFromPoint
RemoveMenu
CheckMenuItem
SetMenuItemInfoW
SetMenuDefaultItem
LoadMenuA
AppendMenuA
InsertMenuA
GetMenuStringA
GetMenuItemInfoA
SetMenuItemInfoA
SetMenuItemBitmaps
LoadStringW
CharUpperW
CharLowerW
wsprintfA
PeekMessageA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackMouseEvent
EndPaint
BeginPaint
ReleaseDC
UpdateLayeredWindow
GetDC
SetLayeredWindowAttributes
GetWindowTextA
GetWindowTextLengthA
GetWindow
GetDesktopWindow
DestroyIcon
DestroyCursor
GetIconInfo
EnumDisplaySettingsA
EnumDisplayDevicesA
MessageBoxA
TabbedTextOutA
UnregisterHotKey
gdi32
CreatePatternBrush
GetPixel
CreateRectRgn
CreateSolidBrush
GetDIBits
GetROP2
GetBkColor
GetTextColor
CreatePen
GetCurrentObject
CreateBrushIndirect
GetStretchBltMode
GetMapMode
StretchBlt
TextOutA
GetTextExtentPointA
GetCurrentPositionEx
Polygon
RoundRect
Rectangle
Pie
Chord
ArcTo
Ellipse
CreateBitmap
LineTo
MoveToEx
SetPixel
CombineRgn
ExtCreateRegion
SetROP2
SetStretchBltMode
GetDeviceCaps
CreateFontA
GetObjectA
BitBlt
SetMapMode
CreateRoundRectRgn
CreateFontIndirectW
CreateDIBSection
GetObjectW
GetTextMetricsA
SetBkColor
SetBkMode
SetTextColor
SetViewportOrgEx
GetStockObject
DeleteDC
SelectObject
CreateCompatibleDC
DeleteObject
CreateDIBitmap
Escape
ExtTextOutA
RectVisible
PtVisible
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
RestoreDC
SaveDC
advapi32
RegCloseKey
RegSetValueExA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyA
shell32
SHGetSpecialFolderPathA
SHChangeNotify
ShellExecuteA
DragQueryFileW
DragFinish
Shell_NotifyIconW
CommandLineToArgvW
DragAcceptFiles
DragQueryFileA
Shell_NotifyIconA
comctl32
ImageList_Destroy
ImageList_GetIconSize
ImageList_EndDrag
ImageList_DragLeave
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_LoadImageW
ImageList_AddIcon
ImageList_Add
ImageList_AddMasked
ImageList_Copy
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_GetIcon
ImageList_SetIconSize
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_GetImageInfo
ImageList_Write
ImageList_Draw
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragShowNolock
ord17
ImageList_DragMove
InitCommonControlsEx
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
StringFromGUID2
GetHGlobalFromStream
CLSIDFromString
gdiplus
GdipSetEmpty
GdipCombineRegionRect
GdipCombineRegionRegion
GdipCombineRegionPath
GdipTranslateRegion
GdipTransformRegion
GdipGetRegionBounds
GdipGetRegionDataSize
GdipGetRegionData
GdipGetRegionHRgn
GdipIsEmptyRegion
GdipIsInfiniteRegion
GdipIsEqualRegion
GdipIsVisibleRegionPoint
GdipIsVisibleRegionRect
GdipGetRegionScansCount
GdipGetRegionScans
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesThreshold
GdipResetImageAttributes
GdipSetInfinite
GdipCloneRegion
GdipCreateRegionRgnData
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipRotateMatrix
GdipTranslateMatrix
GdipCreateMatrix
GdipBitmapSetResolution
GdipCloneBitmapArea
GdipCreateBitmapFromResource
GdipCreateBitmapFromHICON
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext
GdipCreateFromHWND
GdipIsOutlineVisiblePathPoint
GdipIsVisiblePathPoint
GdipWarpPath
GdipWindingModeOutline
GdipWidenPath
GdipFlattenPath
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathString
GdipAddPathPath
GdipAddPathPolygon
GdipAddPathPie
GdipSetImageAttributesColorKeys
GdipAddPathRectangle
GdipAddPathClosedCurve2
GdipAddPathClosedCurve
GdipAddPathCurve2
GdipAddPathCurve
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipGetPathLastPoint
GdipReversePath
GdipClearPathMarkers
GdipSetImageAttributesToIdentity
GdipClosePathFigures
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathData
GdipGetPointCount
GdipSetPathFillMode
GdipGetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath2
GdipCreatePath
GdipGetSolidFillColor
GdipSetSolidFillColor
GdipCreateSolidFill
GdipGetBrushType
GdipCloneBrush
GdipGetStringFormatMeasurableCharacterRangeCount
GdipSetStringFormatMeasurableCharacterRanges
GdipGetStringFormatDigitSubstitution
GdipSetStringFormatDigitSubstitution
GdipGetStringFormatTabStops
GdipGetStringFormatTabStopCount
GdipSetStringFormatTabStops
GdipGetStringFormatHotkeyPrefix
GdipSetStringFormatHotkeyPrefix
GdipGetStringFormatTrimming
GdipSetStringFormatTrimming
GdipGetStringFormatLineAlign
GdipSetStringFormatLineAlign
GdipCreateFontFamilyFromName
GdipSetStringFormatAlign
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipStringFormatGetGenericDefault
GdipCreateStringFormat
GdipCreateHICONFromBitmap
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageThumbnail
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageBounds
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipCloneImage
GdipLoadImageFromFile
GdipEndContainer
GdipBeginContainer2
GdipBeginContainer
GdipRestoreGraphics
GdipSaveGraphics
GdipIsVisibleRect
GdipIsVisiblePoint
GdipIsVisibleClipEmpty
GdipIsClipEmpty
GdipGetVisibleClipBounds
GdipGetClipBounds
GdipGetClip
GdipTranslateClip
GdipResetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipSetClipRect
GdipSetClipPath
GdipSetClipGraphics
GdipDrawImagePointsRect
GdipDrawImagePointRect
GdipDrawImagePoints
GdipDrawImageRectRect
GdipDrawImage
GdipDrawDriverString
GdipMeasureCharacterRanges
GdipCreateRegion
GdipMeasureString
GdipDrawString
GdipFillRegion
GdipFillClosedCurve2
GdipFillClosedCurve
GdipFillPath
GdipFillPie
GdipFillEllipse
GdipFillPolygon
GdipGraphicsClear
GdipDrawClosedCurve2
GdipDrawClosedCurve
GdipDrawCurve2
GdipDrawCurve
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipCreateMatrix2
GdipCreateMatrix3
GdipCloneMatrix
GdipSetMatrixElements
GdipDrawPath
GdipDrawPolygon
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipDrawArc
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetDpiY
GdipGetDpiX
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDeleteMatrix
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipReleaseDC
GdipGetDC
GdipGetMatrixElements
GdipMultiplyMatrix
GdipInvertMatrix
GdipScaleMatrix
GdipShearMatrix
GdipFlush
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesWrapMode
GdipSetImageAttributesRemapTable
GdipSetImageAttributesOutputChannelColorProfile
GdipCloneImageAttributes
GdipCreateImageAttributes
GdipGetFontHeightGivenDPI
GdipGetFontHeight
GdipGetFontUnit
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipGetLogFontA
GdipGetLogFontW
GdipCloneFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipDeletePrivateFontCollection
GdipCreateFontFromLogfontW
GdipCreateFont
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDeleteRegion
GdipDeletePath
GdipDeleteStringFormat
GdipDisposeImageAttributes
GdipDeleteBrush
GdipFillRectangle
GdipCreateTexture
GdipDeleteFont
GdiplusStartup
GdipTransformMatrixPoints
GdipVectorTransformMatrixPoints
GdipIsMatrixInvertible
GdipSetImageAttributesOutputChannel
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipGetStringFormatAlign
GdipDeleteGraphics
GdipDisposeImage
GdipLoadImageFromStream
GdipGetImageDimension
GdipCreateFromHDC
GdipSetPathMarker
GdipDrawImageRect
GdipAddPathEllipse
winhttp
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCloseHandle
WinHttpSetCredentials
WinHttpOpenRequest
WinHttpConnect
WinHttpSetTimeouts
WinHttpOpen
WinHttpQueryHeaders
WinHttpCheckPlatform
WinHttpCrackUrl
atl
ord42
ord47
uxtheme
DrawThemeBackground
CloseThemeData
OpenThemeData
msimg32
GradientFill
AlphaBlend
oleaut32
VarR8FromCy
VarR8FromBool
SafeArrayCreate
VariantInit
SafeArrayDestroy
VariantCopy
SysAllocString
VariantClear
OleLoadPicture
crypt32
CryptStringToBinaryW
dbghelp
MakeSureDirectoryPathExists
oledlg
ord8
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
wininet
InternetOpenA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
rasapi32
RasGetConnectStatusA
RasHangUpA
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE