http
post
setIEproxy
Behavioral task
behavioral1
Sample
a44b170ebd165cae3d41a6bc5a1133c22356b7cf9aa799e6b725f00a7c94b760.dll
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
a44b170ebd165cae3d41a6bc5a1133c22356b7cf9aa799e6b725f00a7c94b760.dll
Resource
win10v2004-20241007-en
Target
a44b170ebd165cae3d41a6bc5a1133c22356b7cf9aa799e6b725f00a7c94b760
Size
185KB
MD5
6a8735a8ceed0c17c4ff09df3a566e54
SHA1
2e35de48f1809c1172eea9647865774c85943c48
SHA256
a44b170ebd165cae3d41a6bc5a1133c22356b7cf9aa799e6b725f00a7c94b760
SHA512
86f2856f884dab05b5c0511ff10bad4c0a3654c0fd06270a5792089036a76d5f663f77a93ee0c10815f47a1f77561a6bdedcf41f86e5f8dc97d822ce21bddebb
SSDEEP
3072:mALwSP/YJ3CKSSLmjm4UwRJhycMOD++lvtdv5TWyT:mgZYXmjm4UXcx77Rl
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
a44b170ebd165cae3d41a6bc5a1133c22356b7cf9aa799e6b725f00a7c94b760 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapFree
IsBadReadPtr
SetFilePointer
GetTickCount
Sleep
GetFileSize
SetEndOfFile
GetLocalTime
GetCommandLineA
GetModuleFileNameA
FreeLibrary
GetProcAddress
HeapReAlloc
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
LCMapStringA
HeapAlloc
GetModuleHandleA
ExitProcess
GetProcessHeap
ReadFile
WriteFile
GetFileSizeEx
SetFilePointerEx
CreateFileA
TerminateThread
GetExitCodeThread
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
WaitForSingleObject
LoadLibraryA
CreateThread
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersion
RtlUnwind
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
MessageBoxA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegFlushKey
RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
HttpQueryInfoA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetGetCookieA
InternetOpenA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetConnectA
InternetReadFile
InternetCloseHandle
InternetSetCookieA
WinHttpSetTimeouts
PathFileExistsA
SystemTimeToVariantTime
VariantTimeToSystemTime
http
post
setIEproxy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ