AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
cda9d05b85c2cc813ff464748319373060b4dcba6f671db98dbc1de56ca13cf6.dll
Resource
win7-20240215-en
Target
cda9d05b85c2cc813ff464748319373060b4dcba6f671db98dbc1de56ca13cf6
Size
392KB
MD5
11e3532f2c2bf3d654877d07263a560a
SHA1
e41153a81dd661e3c0b0e03bfd65b01c079f7d9d
SHA256
cda9d05b85c2cc813ff464748319373060b4dcba6f671db98dbc1de56ca13cf6
SHA512
24f043712d754660f05b123065a30798fa26f9e60fe80b550a3685a34e0032bb6f3b0275923fe547994d4651c0aa67061517a60e0219dcb222471f81c35c6581
SSDEEP
6144:+fxf2hROOYmRDLRR5rhZFQGrsUwF7vlPoSPeCUHBYhXoS:+fxf2hROSRDLR5nWFpPoSNUh2XoS
resource | yara_rule |
---|---|
sample | family_blackmoon |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cda9d05b85c2cc813ff464748319373060b4dcba6f671db98dbc1de56ca13cf6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE