General
-
Target
ff4148081d41e8830fe9fff14fb0d328d497d43f3967cec6a68f930df4bc7974
-
Size
88KB
-
MD5
d2479e1ef4a3c7a5bdf5da948a179ca4
-
SHA1
977667436ed4b3a2b06dc725f08b6ce2e2e0301e
-
SHA256
ff4148081d41e8830fe9fff14fb0d328d497d43f3967cec6a68f930df4bc7974
-
SHA512
3cacfe7fa7c9b1d4410938962d38de19399962d319080d8e19d1924b72fdcbf3c7d86072895a5f33f28607c1c3d7286622a6b29ad2efdad38d46321c4dc080a6
-
SSDEEP
1536:5+4hkM3Yz8wMZhUD2XsjEQWOSkE+Ct6WKBex3GWU5FkWp+AmQwKGSZhCQbIo/tSS:dq6OLM3QasY5Ft71fqWWp+efG4hCQrL
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ff4148081d41e8830fe9fff14fb0d328d497d43f3967cec6a68f930df4bc7974
Headers
Sections
-
out.upx
Headers
Sections