Static task
static1
Behavioral task
behavioral1
Sample
516b6363b5789aabd136c790d5bbfd54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
516b6363b5789aabd136c790d5bbfd54.exe
Resource
win10v2004-20231222-en
General
-
Target
516b6363b5789aabd136c790d5bbfd54
-
Size
37KB
-
MD5
516b6363b5789aabd136c790d5bbfd54
-
SHA1
f38e54e2eae59b4a843906ee9a5218bee7cb20c1
-
SHA256
36773e5d15a919105c977f5fc0e77afacf086df452de0f5e5bbea864980befd2
-
SHA512
3df8b0b1024df9c35f78e00c329cdd2b668f01726529268aeb1216b6cc5be980adc5bd47c6d3bd1ab8b810c72b4f90bb940e8d004a7458c5046681d077b44cd3
-
SSDEEP
768:cKSqqE7R0GQvRd4ZlI1t1VXczYo7mDCTm8BJ1GFY5:UqqE7R0GQ5d4Z2t16iDC1+a5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 516b6363b5789aabd136c790d5bbfd54
Files
-
516b6363b5789aabd136c790d5bbfd54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ