blackguard | 95be71485c8d89e0c44d7c40ec9fc40cc1c3564416654d113051666136327693 | Triage

Sharing

General

Target

95be71485c8d89e0c44d7c40ec9fc40cc1c3564416654d113051666136327693
Size

14.9MB
MD5

38401c27f8661e95ff70066443255d78
SHA1

3c9764641043a8fe770ca459ab1914c3aad3909d
SHA256

95be71485c8d89e0c44d7c40ec9fc40cc1c3564416654d113051666136327693
SHA512

ee2e66979d62ee27d0508de6c996bb2a2d99bfc8f381d6a11fab6801584b94c7f42a0bf29c2a9c210ba8a47764502bda938a801867ef48fd5b3dabeaaba30027
SSDEEP

393216:d3STuPHSky0WyNUHKoc8tQsvcsM+o4YkSbOTByWR:1STGbyx9Hpc8astK7OIU

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
95be71485c8d89e0c44d7c40ec9fc40cc1c3564416654d113051666136327693

Files

95be71485c8d89e0c44d7c40ec9fc40cc1c3564416654d113051666136327693
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.7MB - Virtual size: 14.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ