Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume8/Windows/System32/SppExtComObjPatcher.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume8/Windows/System32/SppExtComObjPatcher.exe
Resource
win10v2004-20230220-en
General
-
Target
SppExtComObjPatcher.exe
-
Size
2KB
-
MD5
7e2d653bf7807ebbfad27683df07f577
-
SHA1
27fb1ce85eb0e1df55275e2ce71fe627c289b961
-
SHA256
cf1ec504badd6ffcaa66d7958259e2fe43b3175904d24e8f8e65bba2be22a5fb
-
SHA512
d3a6c5ed4b59cad01311813d98331f21e9899c12af67a4c6db7acd48385210534feffd850e2fa9b354e3f0f47d4378c3a0f37e2bf78e3e860c32b52878315030
Malware Config
Signatures
Files
-
SppExtComObjPatcher.exe.zip
Password: S@ndb0x!2023@@
-
Device/HarddiskVolume8/Windows/System32/SppExtComObjPatcher.exe.exe windows x64
Password: S@ndb0x!2023@@
80d4996be4f3279aee256ea8a8635393
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
wcsstr
wcslen
_wcsicmp
wcschr
kernel32
Thread32Next
ResumeThread
SuspendThread
WriteProcessMemory
CloseHandle
ExitProcess
GetCommandLineW
DebugActiveProcessStop
CreateProcessW
WaitForSingleObject
CreateRemoteThread
OpenProcess
Thread32First
VirtualFreeEx
Sleep
GetExitCodeProcess
GetStartupInfoW
GetLastError
GetProcAddress
VirtualAllocEx
Process32FirstW
OpenThread
GetExitCodeThread
Process32NextW
GetModuleHandleA
CreateToolhelp32Snapshot
Sections
.text Size: 1024B - Virtual size: 1023B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
manifest.json