Behavioral task
behavioral1
Sample
516d47f768b9a8735f582b8ff553b860.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
516d47f768b9a8735f582b8ff553b860.dll
Resource
win10v2004-20231215-en
General
-
Target
516d47f768b9a8735f582b8ff553b860
-
Size
84KB
-
MD5
516d47f768b9a8735f582b8ff553b860
-
SHA1
bba117932cb24b41add54234fbf6b60b11d7d29f
-
SHA256
e3a932e9c22ce990509091616fd13f0d4afc938ff90f930646032b6771fb24e3
-
SHA512
c24be9865c465aca7dcfff94e04ce2b3216a2f5d1de71b9ac9293370eb0ba86634192bb2503ebf784894e10372b9fd0ff9a89f7a2a03675e64aa1b34d438819b
-
SSDEEP
1536:kN6VY/NAxWxfpMCuwkTiOe+pXon/U8qzsdk0P9o8Z:e66/ASfpMCpGe+pXI/nDd/P9o8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 516d47f768b9a8735f582b8ff553b860
Files
-
516d47f768b9a8735f582b8ff553b860.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE