General
-
Target
826f5a080e0b921d3c4a09a209cff3d4720f257053d1f50a3e1a382d3e244dfc
-
Size
87KB
-
MD5
31ab3a698e72bf519353b2dbd88bcd15
-
SHA1
b12386ad6973b8135b8c51d5a021701a895ab43b
-
SHA256
826f5a080e0b921d3c4a09a209cff3d4720f257053d1f50a3e1a382d3e244dfc
-
SHA512
046583a0d0506f645edfb0e37868ba0c9b0822d0c8b9ab274b8d3700ee86845e89ee485a62ef8cbc0fd5a1745c8d4faf75882334a55c386168c0ba979cc37f8d
-
SSDEEP
1536:Lxos1lS77S/87BJM2pThWf9DcqZmR8/bMxnONDjYseXPmo06/i/XdVw/iz:jjfbcRkbMVu7EqQ/0
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
826f5a080e0b921d3c4a09a209cff3d4720f257053d1f50a3e1a382d3e244dfc
Headers
Sections
-
out.upx
Headers
Sections