blackguard | 4fa5ff265bd256aa3a0f97bb502b534319d4686828ee103b910a483c35729ce6 | Triage

Sharing

General

Target

4fa5ff265bd256aa3a0f97bb502b534319d4686828ee103b910a483c35729ce6
Size

563KB
MD5

d0d731847e9e9a52ef3d86572502a53f
SHA1

0ed5834c6ca7b21ba3cf0bb86015bfb17e8e991a
SHA256

4fa5ff265bd256aa3a0f97bb502b534319d4686828ee103b910a483c35729ce6
SHA512

3bed73270fd1e7c069852309ec9181f45e261c49d33d44c0556b820212aae96bec65cd80a0ff7bb14154bce4225a1fec897d27f53b1d205efe7f51defc9a9ee2
SSDEEP

6144:fTZ71FFLr+pXvGByOvOe+UKzrSypJ98B1WgUtmqziDn7MR/sdeHOCIi/Q8tUu6w7:5N2VvGfvyUSHt6LGBgK

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa5ff265bd256aa3a0f97bb502b534319d4686828ee103b910a483c35729ce6

Files

4fa5ff265bd256aa3a0f97bb502b534319d4686828ee103b910a483c35729ce6
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ