General

  • Target

    a0e9a6dd18cfdded578955ce3e03466c5ad68ee55123075803916328bbf0c920

  • Size

    275KB

  • MD5

    cd424c3cc4544fd22a35fecefceeb4bf

  • SHA1

    6f3f0a9902c95ddfb83f3c2740b5727ff7c424d0

  • SHA256

    a0e9a6dd18cfdded578955ce3e03466c5ad68ee55123075803916328bbf0c920

  • SHA512

    0e1760c06c5ce1c4a08f365975aeda4923bbd1338365c6d73547d06d181cd56b4bdf56b0c7c077f3315672daa167aa0e9d4f51ce22cdfee92ed2c59e28f1cb13

  • SSDEEP

    3072:TqSe5OmiEoAcCbZ6UKGIoutX8Ki3c3YT8Vgp:TqzOPI16UKHoSHec3YT8Vi

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0e9a6dd18cfdded578955ce3e03466c5ad68ee55123075803916328bbf0c920
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections