General
-
Target
e20d8cbbb7527e3a09e17f504cc89535ee6bc033d343f3759326ff584d9d6626
-
Size
88KB
-
MD5
44bfb38978965c886390f5dc9d4eacd2
-
SHA1
fce684fff9c86ddae63543c12fb575fe0c809652
-
SHA256
e20d8cbbb7527e3a09e17f504cc89535ee6bc033d343f3759326ff584d9d6626
-
SHA512
1e07c9359d64c3c172995eea266dcad8888e8fb58a3c421bfe93520dda4949d53691cff4f7b1bafbe5a066e2575af3da95cf1f7ec90365455b18fe748e48ab45
-
SSDEEP
1536:EF7p8VeHwYaBlAvXhRDtxY11686va0QgE9gHgMVnvLiDXsO:K98VNTAP3BW1k81cLAUvLiDXsO
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
e20d8cbbb7527e3a09e17f504cc89535ee6bc033d343f3759326ff584d9d6626
Headers
Sections
-
out.upx
Headers
Sections