Behavioral task
behavioral1
Sample
83d29a80f12a8221c6116ac162b648a57af2e0c841425cb98b8e6bf427680c07.exe
Resource
win7-20240903-en
General
-
Target
83d29a80f12a8221c6116ac162b648a57af2e0c841425cb98b8e6bf427680c07
-
Size
10.0MB
-
MD5
32462d379572a326ad8bd935afe512a3
-
SHA1
8eef14ba39fcd35cc98c9f05cd4386c957cfac8d
-
SHA256
83d29a80f12a8221c6116ac162b648a57af2e0c841425cb98b8e6bf427680c07
-
SHA512
d1c53cf2aed0dcd4568be9e47e3df6251becc246d915b7eb6c2151c066c3cf68bb2fb7ecb61c7e02902ccc29d2c94ec8d8d8a3836060d31796d827828da340a1
-
SSDEEP
98304:uw1sjsnAOsy77BNDh+r3UY6y5789Wx5WaibDWzV+ob7c0QXm:qjsAOFNDkr3LJ4w+ob7nWm
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule sample family_blackmoon -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d29a80f12a8221c6116ac162b648a57af2e0c841425cb98b8e6bf427680c07
Files
-
83d29a80f12a8221c6116ac162b648a57af2e0c841425cb98b8e6bf427680c07.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_READ
.KkVj Size: 701KB - Virtual size: 704KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jKwj Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Qsaj Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ