Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win10v2004-20230221-es
General
-
Target
Patch.exe
-
Size
692KB
-
MD5
493af8c51c6dc50cdf81eccbbde635f9
-
SHA1
9ea32655417927aae5114b52b04f4b941c79eee1
-
SHA256
5272b8d1f86be134bfed13454fdca4860c56a2e07efc640a53c47834ffd73862
-
SHA512
46e0fce5d350b7dac9982c99da985ac5bac221c83b30a3a100dcacb3c68e8fb1e93eaa2ab2b63ccb9756b1ddda981ffee5904a40532ef31debca2fb429954705
-
SSDEEP
12288:B99js/mSVpA1kRLhuGlrB97Fw6NBBLI7TvMMfsfwU:Jje7VpA1kyyxjB9I7TNsfwU
Malware Config
Signatures
Files
-
Patch.exe.exe windows x86
28ba3ed6ddfe8da2c24ee152ee39eee3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
OleUninitialize
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
imagehlp
UnMapAndLoad
Sections
CODE Size: 645KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE