blackguard | 4b3d95dc80a1203c48bcbd2089d57eeaf3a000c42132c2dbb8bda2c5a066f9c9

Sharing

Copy URL

Twitter E-mail

General

Target

4b3d95dc80a1203c48bcbd2089d57eeaf3a000c42132c2dbb8bda2c5a066f9c9
Size

813KB
MD5

7b5f5062f98cbe4bde150d909cc594ad
SHA1

8c5b2fa29d7ef3d00e7c8e0cd304190172c75d0b
SHA256

4b3d95dc80a1203c48bcbd2089d57eeaf3a000c42132c2dbb8bda2c5a066f9c9
SHA512

17ceea26ee98e59148ad5d5df2a4fd59650c89181c8899788cdeebce71dc47101786ce70b08ea02838d0720ac838d03fb8840a5a76752ede12943274183241fc
SSDEEP

12288:e5LCtNOxLwZ76FWEYhY+PelMW914VbhYavglxH2oL/vWQ8V4DdhzLu:Lydhd914b2aoB/uQ8V4BdLu

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Files

4b3d95dc80a1203c48bcbd2089d57eeaf3a000c42132c2dbb8bda2c5a066f9c9
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1c:cf:73:fe:8f:b4:39:d2:6f:82:49:ac:8c:42:bd:2b
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

19-05-2022 00:00

Not After

18-05-2025 23:59

Subject

CN=IT HIT LTD.,O=IT HIT LTD.,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:23:71:a2:cb:37:e7:77:b8:0c:52:2e:47:3b:50:2a:be:11:9f:08
Signer

Actual PE Digest

b1:23:71:a2:cb:37:e7:77:b8:0c:52:2e:47:3b:50:2a:be:11:9f:08

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

1c:cf:73:fe:8f:b4:39:d2:6f:82:49:ac:8c:42:bd:2bCertificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

b1:23:71:a2:cb:37:e7:77:b8:0c:52:2e:47:3b:50:2a:be:11:9f:08Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 804KB - Virtual size: 804KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

1c:cf:73:fe:8f:b4:39:d2:6f:82:49:ac:8c:42:bd:2b
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

b1:23:71:a2:cb:37:e7:77:b8:0c:52:2e:47:3b:50:2a:be:11:9f:08
Signer

.text
Size: 804KB - Virtual size: 804KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 12B