Behavioral task
behavioral1
Sample
cb6953fa469deb5c60128850c83577fbfecd335f48bfb8680445db67879c7dc2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cb6953fa469deb5c60128850c83577fbfecd335f48bfb8680445db67879c7dc2.exe
Resource
win10v2004-20240611-en
General
-
Target
cb6953fa469deb5c60128850c83577fbfecd335f48bfb8680445db67879c7dc2
-
Size
2.0MB
-
MD5
62b5ca4a4a2fce8e234d783ce808220e
-
SHA1
2c75049f664bccc286a8f359ec8f8db8189e7e25
-
SHA256
cb6953fa469deb5c60128850c83577fbfecd335f48bfb8680445db67879c7dc2
-
SHA512
214a8c266f1646c89dafa2c0e69bf7d3d55768a97ce26208c0869c8e34a16505f6567d96cd61538896ab32e4fb2e3a84fcac96f340ba9a00ce6b6d529525e229
-
SSDEEP
24576:+0xwh70GFcpQ4pkUKzOF3/Wsgs0q3kuPfeyP/Z2KdIwJqmCwl4swZ4zajWPb+Ckl:hxXvFP/Uw0mCwpwSzqblzj
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb6953fa469deb5c60128850c83577fbfecd335f48bfb8680445db67879c7dc2
Files
-
cb6953fa469deb5c60128850c83577fbfecd335f48bfb8680445db67879c7dc2.exe windows:4 windows x86 arch:x86
3ec24b0784b5f3b9525303574f05f22f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32First
Process32Next
CloseHandle
IsDebuggerPresent
VirtualAlloc
VirtualFree
VirtualProtect
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetCommandLineA
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
FindNextFileA
FindClose
GetStartupInfoA
CreateProcessA
WaitForSingleObject
DeleteFileA
GlobalFree
GetTickCount
Sleep
WritePrivateProfileStringA
WriteFile
GetPrivateProfileStringA
IsBadReadPtr
HeapReAlloc
ExitProcess
GetModuleHandleA
IsWow64Process
SetEnvironmentVariableA
CompareStringW
CreateToolhelp32Snapshot
IsBadCodePtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
LCMapStringW
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
GetACP
GetLocalTime
GetSystemTime
RaiseException
TerminateProcess
RtlUnwind
GetOEMCP
GetCPInfo
SetErrorMode
GetProcessVersion
FindResourceA
LoadResource
LockResource
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcatA
GlobalFlags
MulDiv
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
RtlZeroMemory
GetAtomNameW
WideCharToMultiByte
CreateEventA
OpenEventA
CreateMutexA
SetWaitableTimer
CreateWaitableTimerA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetCurrentProcessId
CreateFileA
GetDiskFreeSpaceExA
GlobalMemoryStatusEx
Module32Next
GetFileAttributesA
FlushFileBuffers
SetFilePointer
LocalAlloc
lstrcpyA
HeapDestroy
MultiByteToWideChar
lstrcatW
lstrlenW
lstrcmpA
lstrlenA
HeapFree
InterlockedDecrement
InterlockedIncrement
lstrcpynA
LocalFree
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetCurrentProcess
GetLastError
GetProcessHeap
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
SetLastError
GetTimeZoneInformation
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateThread
RtlMoveMemory
LocalSize
HeapAlloc
CompareStringA
HeapCreate
user32
SetParent
MoveWindow
UpdateWindow
ValidateRect
CreateDialogIndirectParamA
PostThreadMessageA
UnregisterClassA
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
CreateWindowExA
GetClassLongA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
SetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GrayStringA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
ClientToScreen
GetWindow
GetDlgCtrlID
PtInRect
ScreenToClient
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
SetWindowTextW
GetKeyState
CallNextHookEx
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
GetWindowLongA
SendMessageA
PostMessageA
SetActiveWindow
GetActiveWindow
GetForegroundWindow
SetWindowTextA
SetPropW
SetPropA
GetPropW
GetPropA
RemovePropW
RemovePropA
EnumPropsExW
SystemParametersInfoW
SetWindowRgn
SetRect
IsIconic
IsZoomed
GetSystemMetrics
GetMenu
SetMenu
DrawMenuBar
RegisterWindowMessageW
WindowFromDC
UpdateLayeredWindow
GetMessageW
IsChild
TranslateMDISysAccel
TranslateAcceleratorW
IsDialogMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
LoadIconW
CreateIconFromResourceEx
LoadImageW
DrawIconEx
CreateMenu
CreatePopupMenu
GetSystemMenu
LoadMenuW
GetMenuInfo
DestroyMenu
GetMenuItemCount
GetMenuItemInfoW
AppendMenuW
InsertMenuW
SetMenuInfo
GetSubMenu
GetMenuItemID
CheckMenuRadioItem
SetForegroundWindow
TrackPopupMenu
GetMenuStringW
GetMenuItemRect
GetMenuState
GetMenuDefaultItem
MenuItemFromPoint
RemoveMenu
CheckMenuItem
SetMenuItemInfoW
SetMenuDefaultItem
MessageBoxA
wsprintfA
DispatchMessageA
GetMessageA
PeekMessageA
GetFocus
GetIconInfo
CopyIcon
GetClassNameW
MessageBoxW
SetTimer
EnableMenuItem
KillTimer
PostMessageW
BeginPaint
ShowWindow
DefWindowProcW
CreateMDIWindowW
DialogBoxParamW
CreateDialogParamW
EndDialog
DialogBoxIndirectParamW
DestroyWindow
SetClassLongW
GetClassLongW
CreateDialogIndirectParamW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
InvalidateRect
ReleaseDC
GetDC
CallWindowProcW
SetFocus
GetNextDlgTabItem
GetAncestor
FindWindowA
GetWindowThreadProcessId
CreateWindowStationA
GetClassNameA
GetWindowTextA
GetWindowRect
SetWindowPos
EnableWindow
IsWindowVisible
IsWindowEnabled
GetSysColor
DestroyAcceleratorTable
DestroyIcon
LoadCursorW
ReleaseCapture
SetCapture
GetClientRect
SetCursor
DestroyCursor
SendMessageW
GetWindowLongW
GetWindowTextW
GetWindowTextLengthW
FindWindowExW
IsWindow
GetAsyncKeyState
SetWindowLongW
GetParent
GetDlgItem
TrackMouseEvent
EndPaint
RegisterClipboardFormatA
gdi32
GetObjectA
GetDIBits
CreatePatternBrush
CreateFontIndirectW
GetObjectW
CreateSolidBrush
GetStockObject
StretchBlt
SetStretchBltMode
GetStretchBltMode
CreateDIBSection
CreateCompatibleDC
BitBlt
CreateRoundRectRgn
GetTextMetricsA
SetBkColor
SetBkMode
SetTextColor
DeleteDC
SelectObject
DeleteObject
CreateBitmap
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
comctl32
InitCommonControlsEx
ord17
wsock32
getsockname
recv
send
gethostbyname
connect
ioctlsocket
htons
socket
closesocket
ntohs
WSAAsyncSelect
select
WSACleanup
WSAStartup
wininet
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
InternetConnectA
InternetSetOptionA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
StartServiceA
OpenServiceA
CreateServiceA
OpenSCManagerA
RegSetValueExA
shell32
DragAcceptFiles
Shell_NotifyIconW
DragFinish
DragQueryFileW
CommandLineToArgvW
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CLSIDFromString
GetHGlobalFromStream
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
gdiplus
GdipMultiplyMatrix
GdipGetMatrixElements
GdipSetMatrixElements
GdipCloneMatrix
GdipCreateMatrix3
GdipCreateMatrix2
GdipCreateMatrix
GdipGetRegionScans
GdipGetRegionScansCount
GdipIsVisibleRegionRect
GdipIsVisibleRegionPoint
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsEmptyRegion
GdipGetRegionHRgn
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionBounds
GdipTransformRegion
GdipTranslateRegion
GdipCombineRegionPath
GdipCombineRegionRegion
GdipCombineRegionRect
GdipSetEmpty
GdipSetInfinite
GdipCloneRegion
GdipCreateRegionRgnData
GdipSetImageAttributesOutputChannel
GdipCreateRegionPath
GdipCreateRegionRect
GdipIsOutlineVisiblePathPoint
GdipIsVisiblePathPoint
GdipWarpPath
GdipWindingModeOutline
GdipWidenPath
GdipFlattenPath
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathString
GdipAddPathPath
GdipAddPathPolygon
GdipAddPathPie
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathClosedCurve2
GdipAddPathClosedCurve
GdipAddPathCurve2
GdipAddPathCurve
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine
GdipGetPathLastPoint
GdipReversePath
GdipClearPathMarkers
GdipSetPathMarker
GdipClosePathFigures
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathData
GdipGetPointCount
GdipSetPathFillMode
GdipGetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath2
GdipCreatePath
GdipGetFontHeightGivenDPI
GdipGetFontHeight
GdipGetFontUnit
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipGetLogFontA
GdipGetLogFontW
GdipCloneFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipDeletePrivateFontCollection
GdipShearMatrix
GdipCreateFont
GdipGetImageGraphicsContext
GdipCreateFromHWND
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusStartup
GdipCreateHICONFromBitmap
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipTranslateMatrix
GdipGetImageVerticalResolution
GdipGetCellDescent
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageBounds
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipCloneImage
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipEndContainer
GdipBeginContainer2
GdipBeginContainer
GdipRestoreGraphics
GdipSaveGraphics
GdipIsVisibleRect
GdipIsVisiblePoint
GdipIsVisibleClipEmpty
GdipIsClipEmpty
GdipGetVisibleClipBounds
GdipGetClipBounds
GdipGetClip
GdipTranslateClip
GdipResetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipSetClipRect
GdipSetClipPath
GdipSetClipGraphics
GdipDrawImagePointsRect
GdipDrawImagePointRect
GdipDrawImagePoints
GdipDrawImageRect
GdipDrawImageRectRect
GdipDrawImage
GdipDrawDriverString
GdipMeasureCharacterRanges
GdipCreateRegion
GdipMeasureString
GdipDrawString
GdipFillRegion
GdipFillClosedCurve2
GdipFillClosedCurve
GdipFillPath
GdipFillPie
GdipFillEllipse
GdipFillPolygon
GdipGraphicsClear
GdipDrawClosedCurve2
GdipDrawClosedCurve
GdipDrawCurve2
GdipDrawCurve
GdipDrawPath
GdipDrawPolygon
GdipDrawPie
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipDrawArc
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetDpiY
GdipGetDpiX
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDeleteMatrix
GdipGetWorldTransform
GdipSetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipReleaseDC
GdipGetDC
GdipRotateMatrix
GdipInvertMatrix
GdipTransformMatrixPoints
GdipScaleMatrix
GdipVectorTransformMatrixPoints
GdipIsMatrixInvertible
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipFlush
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCloneBitmapArea
GdipBitmapSetResolution
GdipCreateSolidFill
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetImageThumbnail
GdipGetCellAscent
GdipSetImageAttributesColorKeys
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesThreshold
GdipGetLineSpacing
GdipGetImageHorizontalResolution
GdipResetImageAttributes
GdipSetImageAttributesToIdentity
GdipCloneImageAttributes
GdipCreateImageAttributes
GdipDeleteRegion
GdipDeletePath
GdipDeleteFont
GdipCreateTexture
GdipFillRectangle
GdipDeleteBrush
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipCreateFontFromLogfontW
GdipDisposeImage
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipGetImageAttributesAdjustedPalette
GdipSetImageAttributesWrapMode
GdipSetImageAttributesRemapTable
GdipSetImageAttributesOutputChannelColorProfile
GdipCreateRegionHrgn
msimg32
AlphaBlend
atl
ord42
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsA
oledlg
ord8
rasapi32
RasGetConnectStatusA
RasHangUpA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
Sections
.text Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.4MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE