General

  • Target

    bba98504089b843cd36836694a979a4e8ee5b50045a7ec70baf2803764e80e50

  • Size

    153KB

  • MD5

    0651781fa24e38185ac857ad7a705233

  • SHA1

    63bfc439957d08ab55e251921fabb36d4c00730a

  • SHA256

    bba98504089b843cd36836694a979a4e8ee5b50045a7ec70baf2803764e80e50

  • SHA512

    811d5c9dbd53086115eb0e733d8238e409d206cc5532752de611b667fce2ef56d55df96c7c724293a0550a9f32a6df9eeaa1b3ca2e803fe72cfe7a26a7d7528e

  • SSDEEP

    1536:rj+zUtBIBU+2Da4lH4Iiue58o/ZDv4GMfcHZIlVKAn5ZAcXeOqbZ6NjkEVnouy80:PqSe5OmiEoAcCbZ6FNout0

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bba98504089b843cd36836694a979a4e8ee5b50045a7ec70baf2803764e80e50
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections