General

  • Target

    Sample.zip

  • Size

    16.5MB

  • MD5

    a6dfd51b37e2f304af22d1ac85d526c7

  • SHA1

    ee311d5d687d1d4cc658ce098297654046fd4c09

  • SHA256

    1f3df6b507aa42d38321c8578a58d230511201838040454416ea14c6a66ef3e8

  • SHA512

    b0b12c52f0f6048f210280d372446cf92368cb15202a07db70c415d15c2c09966a812980307bfe79445908cf38f06806200701f697f70517aec7343c21f4c10d

  • SSDEEP

    393216:7znO1kG5j8NnMlK8RsJAzVMN28bOsV7pdBXawKaPKBCQ+ejhC+CwAs1Z8zuvsNMV:6j+nMl/mNZOGuhBCQBhC+7As12zuviy

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sample.zip
    .zip
  • jtuzi.dll
    .dll windows:5 windows x86 arch:x86

    424c8f99f3aa48dce39f100b944a75e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libexdui.dll
    .dll windows:4 windows x86 arch:x86

    7038dcaf27c89d50b653b9014b3d972a


    Headers

    Imports

    Exports

    Sections

  • 启动游戏.exe
    .exe windows:5 windows x86 arch:x86

    220b53c5388a7b222ee9f59187f58bd1


    Code Sign

    Headers

    Imports

    Exports

    Sections