Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win10-20230220-en
General
-
Target
Patch.exe
-
Size
85KB
-
MD5
1963215be5bef2cc0b8786057b2f406e
-
SHA1
66b0cff746baa348719eab2508e4b7ccba75e335
-
SHA256
d50bc227c8e0c573daca7291d9f684a9626e6274aa4e08f778f7cc2aa9eb57b0
-
SHA512
e3c88d1ad4bf9593519ee7cde1a784c14ab5c15784e2c49e35454df3280dd638f068d28989af9f953cce955a4452de38baf9883070de66a2fad488524a038ac0
-
SSDEEP
1536:eZEMXpDFyDX+j3c6/LYN1gdEsAkmi0xNpGfZuEfV/Daaxr:O7ZhU6csLq1gdXAkF0xNpGx1FOax
Malware Config
Signatures
Files
-
Patch.exe.exe windows x86
35046c3cc81f6be4b985f4a75fef0f4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharNextA
oleaut32
SysFreeString
advapi32
RegSetValueExA
version
VerQueryValueA
gdi32
SetTextColor
msimg32
AlphaBlend
ole32
CoTaskMemFree
shell32
SHGetPathFromIDListA
winmm
waveOutWrite
comdlg32
GetSaveFileNameA
imagehlp
CheckSumMappedFile
Sections
CODE Size: 41KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE