blackguard | 8d396c4b4a3646c2acbfb0f912614d5f8470a0c01784e70ba9974003ce7f34c0 | Triage

Sharing

General

Target

8d396c4b4a3646c2acbfb0f912614d5f8470a0c01784e70ba9974003ce7f34c0
Size

3.3MB
MD5

ed875577579c78935633fd3262e95223
SHA1

b590e45288162e1e5b3a8436d0290c0734c39507
SHA256

8d396c4b4a3646c2acbfb0f912614d5f8470a0c01784e70ba9974003ce7f34c0
SHA512

1f37285d9f7111b313f27ea17217e42737a570bba33c36a486c2e657d109d879902291dcc8b03ccb4777ee4dccffbb8b8d62868c62997b4f4a122aaba1318e1e
SSDEEP

24576:iCLrvQELY71OP9DSjyR/hENgQ8m657w6ZBLmkitKqBCjC0PDgM5AyYN/2Ruf2seJ:iaMaNhELVV1BCjBrYNKufo9AunHSfvA

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d396c4b4a3646c2acbfb0f912614d5f8470a0c01784e70ba9974003ce7f34c0

Files

8d396c4b4a3646c2acbfb0f912614d5f8470a0c01784e70ba9974003ce7f34c0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\XUnity.AutoTranslator\src\XUnity.AutoTranslator.Setup\obj\Release\net40\SetupReiPatcherAndAutoTranslator.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ