Static task
static1
Behavioral task
behavioral1
Sample
ver-self.cmd
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ver-self.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
verpatch.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
verpatch.exe
Resource
win10v2004-20220812-en
General
-
Target
verpatch-1.0.15.1-x86-codeplex.zip
-
Size
65KB
-
MD5
fca99d4e8d7fc9ced2ccad1a13a734bb
-
SHA1
41ee1ab31cdb30faab0ddd673eb1845fb1917b4a
-
SHA256
24238c27ccf656b2ec8083597e51febb38175077c1610bd624d2c38d0710fda2
-
SHA512
70ed49eb2af251843167d10926b09b6e1b73a4e557b02867a9012c49cd25b62aa971f6b982fc5ce345c9488a85b5cf0f9f33ba99c9953cc8314bb499652a824d
-
SSDEEP
1536:xKGHNtmZyTR1hHQ+DDO7xT3JRRx3o9q2/3irx2:RtmcTnhHQ+nO9TZLx3v+z
Malware Config
Signatures
Files
-
verpatch-1.0.15.1-x86-codeplex.zip.zip
-
ver-self.cmd.cmd .vbs
-
verpatch-ReadMe.txt
-
verpatch.exe.exe windows x86
3be4351dd03ee59901fcc9288ad0633f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
WriteFile
SetFilePointer
CloseHandle
CreateFileW
GetShortPathNameW
SetLastError
LockResource
SetErrorMode
LoadResource
SizeofResource
GetFileSizeEx
ReadFile
FindResourceExW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
SetThreadLocale
WriteConsoleW
SetStdHandle
SetFilePointerEx
FlushFileBuffers
HeapReAlloc
HeapAlloc
HeapFree
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetModuleFileNameW
GetProcessHeap
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
DeleteCriticalSection
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
OutputDebugStringW
LCMapStringW
ReadConsoleW
imagehlp
CheckSumMappedFile
UnMapAndLoad
MapAndLoad
version
GetFileVersionInfoW
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ