Static task
static1
Behavioral task
behavioral1
Sample
WksPatch[1].exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WksPatch[1].exe
Resource
win10-20220901-en
General
-
Target
WksPatch[1].exe
-
Size
12KB
-
MD5
24837f736517f367a11dcb8bd8ed6306
-
SHA1
bdc843c65e6984b35dd26c53e84338ff3982da2d
-
SHA256
bf0a41febde8806d259528cc07a9677d43726b78efbca7fb4abb95e5aaf366b8
-
SHA512
088401ee2bd5ebc5845fb7ca349a7772195196bfaf0a3e31e979efe4e4487098c3ca67366ee268165e68fd938b0152fb2ed0f245d7bc375a135bda0f9008af8b
-
SSDEEP
192:kOToOfTdFgLo5i517NKGFNj0+S3/4nHsWCA/G3X0bPYiX09zdWmGSv4sVkU:vJTfJi1RKGjj0B3E2SG3kbAUsEmRvYU
Malware Config
Signatures
Files
-
WksPatch[1].exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE