blackshades | 88cfa6f777f8659a5f56c6100b2115ea06bf4f9e529712379a79e6515f49ec96

General

Target
88cfa6f777f8659a5f56c6100b2115ea06bf4f9e529712379a79e6515f49ec96
Size 112KB
Sample250218-cs1laswkhm
SHA256 88cfa6f777f8659a5f56c6100b2115ea06bf4f9e529712379a79e6515f49ec96
MD5 878b1324635aff310be6d397b88aead6
SHA1 19f368ccbdaf1b5f759c287e53da7742da0f7960
SHA512 bc00170d4d3bd9ac273292b6cce64e650c9b11d1309152951321888cf4ccf900b321c34ed27a3944f92d29d3605623e4dd8cb5872858af4d4a1305f24b12adcc
SSDEEP 1536:XpHuQ12DL57bqhb+lauaiqmPMxNWETBfxzSCel8uWZHNIgQrIr7rVr2QrOd:XN2DUhb+lauRGBM8VOrIr7rVrprO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

upx blackshades

Blackshades payload 1 IoCs

resource	yara_rule
sample	family_blackshades

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88cfa6f777f8659a5f56c6100b2115ea06bf4f9e529712379a79e6515f49ec96

SHA256 88cfa6f777f8659a5f56c6100b2115ea06bf4f9e529712379a79e6515f49ec96
MD5 878b1324635aff310be6d397b88aead6
SHA1 19f368ccbdaf1b5f759c287e53da7742da0f7960
SHA512 bc00170d4d3bd9ac273292b6cce64e650c9b11d1309152951321888cf4ccf900b321c34ed27a3944f92d29d3605623e4dd8cb5872858af4d4a1305f24b12adcc
SSDEEP 1536:XpHuQ12DL57bqhb+lauaiqmPMxNWETBfxzSCel8uWZHNIgQrIr7rVr2QrOd:XN2DUhb+lauRGBM8VOrIr7rVrprO
MD5 SHA1 SHA512 SSDEEP

Blackshades payload
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

370656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths