Behavioral task
behavioral1
Sample
Patch.exe
Resource
win10v2004-20220812-en
General
-
Target
Patch.exe
-
Size
137KB
-
MD5
3ecfed8b9ae9be7d88a567d280e66ea9
-
SHA1
fd3a6c8e66c914a3c87469cf323e48d3fb489e1d
-
SHA256
66059ed60f42a94fb70334907906ad3246bd646ea3ebaba68dfe5aeb38677d02
-
SHA512
b94874d2ff0780d1873ff7917da3ee4a2156d1d63d3548c09dd7ff5624087ef346edcc6d8de1386c815a57f3500e52257107c7b47b4fdaaa572dfb12b7ebf473
-
SSDEEP
3072:dj2yeZ2Ks7rh34XZnFout3gcyr6KdCO9jShfNGcgw6BoLivKqJ9wTTUZ:dj2yeZpErh38FoS3QdCCjSh0zwEbJjGE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
Patch.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE