General

  • Target

    a4b4df4677ec228a0dc86208fe63b6c6a7bda23a04f647951ff0f89d1a441df0

  • Size

    537KB

  • MD5

    944de3d3377f6cdf8d0e7c09f472a10b

  • SHA1

    da332bd04c5ba6f1472789f3d5ad6bcc40281071

  • SHA256

    a4b4df4677ec228a0dc86208fe63b6c6a7bda23a04f647951ff0f89d1a441df0

  • SHA512

    56721893830483e119ec0480e7f5101faf30a760effe7e97dcd899ca2ade69dead4cb24aefc755e534da44ca3d5576264ea706fb596b86e310813c38f28bdbf8

  • SSDEEP

    12288:bsRWNkJyNkiJWGvGVnXpb+U2R3uo98pAOacm:bsRWN/NwymnXpb+UEeo9InLm

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4b4df4677ec228a0dc86208fe63b6c6a7bda23a04f647951ff0f89d1a441df0
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections