General

  • Target

    b4c1124614debc55c0f6adf4ed5147287b5b177f7b9b4d786415868045a317db

  • Size

    572KB

  • MD5

    04f4e30941e67a1016d05b26be6187c2

  • SHA1

    f2e50c9d9cfb3abb70e02547c4a1bc8e0d217c38

  • SHA256

    b4c1124614debc55c0f6adf4ed5147287b5b177f7b9b4d786415868045a317db

  • SHA512

    c248f696f6f2fe0d7dedd995b29008ccaf1fb382096cebe887afe337507e977947747d0ccc851d979638f00318f0be3317bc283639c09a993950285da1bd5ffc

  • SSDEEP

    12288:wUxTzuUDAwLrT46XuNm9Fi01bg/ap+2voD3seRFn+CN3aB4c:Nzuq/LrT46+S80S/apFoDdhaB

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b4c1124614debc55c0f6adf4ed5147287b5b177f7b9b4d786415868045a317db
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections