_memicmp
Static task
static1
Behavioral task
behavioral1
Sample
9de8d39e70847fa15be3296e78c5da671bf879904f5a49bd472c1c5c9c0d3f61.exe
Behavioral task
behavioral2
Sample
9de8d39e70847fa15be3296e78c5da671bf879904f5a49bd472c1c5c9c0d3f61.exe
General
-
Target
9de8d39e70847fa15be3296e78c5da671bf879904f5a49bd472c1c5c9c0d3f61
-
Size
241KB
-
MD5
2f8ee20cab3980e9a194a9cbe2af125c
-
SHA1
ea6eeafe9f4145e8b02feadda854ac6c1d2d4516
-
SHA256
9de8d39e70847fa15be3296e78c5da671bf879904f5a49bd472c1c5c9c0d3f61
-
SHA512
88e5d1543ca431356d753063b1e515e5240d2dfc0b43a74b5fff0c2482f24592045c89e4c9888ccce744a825b9acda1f79dabbc0dc1338794a9e65e9f048b93d
-
SSDEEP
6144:duUlZmGe8vJ+Ef/Ed0YYCjZJWNH2p9Fxf7b93Z5mpVkMHrZ:QUlIGxAeY0WjEGhfF3DmL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9de8d39e70847fa15be3296e78c5da671bf879904f5a49bd472c1c5c9c0d3f61
Files
-
9de8d39e70847fa15be3296e78c5da671bf879904f5a49bd472c1c5c9c0d3f61.exe windows:6 windows x64
3d038da58dcc03d761a851caf1420778
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateProcessA
ExitProcess
FindResourceW
FreeLibrary
FreeResource
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetTempPathA
GetTickCount
GlobalMemoryStatusEx
HeapAlloc
HeapFree
IsBadReadPtr
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WinExec
WriteFile
lstrlenA
user32
MessageBoxA
wsprintfA
api-ms-win-crt-string-l1-1-0
strlen
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ