_cgo_dummy_export
authorizerTrampoline
callbackTrampoline
commitHookTrampoline
compareTrampoline
doneTrampoline
preUpdateHookTrampoline
rollbackHookTrampoline
stepTrampoline
updateHookTrampoline
General
-
Target
2024-06-10_a9533054bcacd748b349bd2f2bad832d_darkbit
-
Size
18.4MB
-
MD5
a9533054bcacd748b349bd2f2bad832d
-
SHA1
1345a0b244a282100ca720a4016206522ad71187
-
SHA256
604c968fbad9494574ca9815f49864a36e4be338200fac362f0796ddd3bffee2
-
SHA512
99c6a2fb08f1ed82fd7ce4994b22094778bb698a0597562ec1ca5bd5e8a0e83e5d89d3de9cb962c350db08e2a3ab5c678a8d42cee2adeed21f04414db5302080
-
SSDEEP
98304:pmkq9qYRzW1ri9Z6ki1STzQA6/bajGnq1HEUMo2HX2N:BqpWALiwTzX6SGNw2
Score
10/10
Malware Config
Signatures
-
Detects executables containing bas64 encoded gzip files 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-10_a9533054bcacd748b349bd2f2bad832d_darkbit
Headers
Exports
Sections