blackguard | 503a514ce51decd9b5cf48f6dd3c5347e14c7503092cedf8881d40001dbe6829 | Triage

Sharing

General

Target

503a514ce51decd9b5cf48f6dd3c5347e14c7503092cedf8881d40001dbe6829
Size

5.0MB
MD5

fce45649aa3ef5df00404301a5e4645b
SHA1

1bcccc4c83ef6edb77dbac6097498dd63abadbe2
SHA256

503a514ce51decd9b5cf48f6dd3c5347e14c7503092cedf8881d40001dbe6829
SHA512

99e55cccd1572d33f2d5c8f4b66ed18f042e4a191e684fae93dcdf3b280c6a18c2b232d8f17de42a8a31eb90712397735497a609a158c5bcaf95436b7ee8157f
SSDEEP

49152:zbqnJ/6/ovIurSYpmbUDgus06UdyPnnXlPM:zmJS/GVpmMgprvl

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
503a514ce51decd9b5cf48f6dd3c5347e14c7503092cedf8881d40001dbe6829

Files

503a514ce51decd9b5cf48f6dd3c5347e14c7503092cedf8881d40001dbe6829
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ