Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win10v2004-20230220-en
General
-
Target
patch-H Hayat.zip
-
Size
92KB
-
MD5
d40ea0dfda9aceaee6cf513f6d4ea20a
-
SHA1
2ae870b282fc385b95ae0bc328e43da4e097cabe
-
SHA256
9b6a322db8f4a4e6c7848720c3b749c3a0c04072cd509b7afdb8ae9e65801405
-
SHA512
60ea4a8660f28148a029298e01595c08b4d95148c3711c36a48a9c6af025dd17d2c3fb5ea6e2869781c646ef69c531e5f600084ac16e5a518afe7a81fd5f3a38
-
SSDEEP
1536:g7J6dhbbgYWD9rGVYUhWFerdcKbZAdS/abLp1icKtahhFpG1egIcCb026ipAJ8q/:2ehbbaJib8FCcKeTb9QcnhP4lIZ0uq1t
Malware Config
Signatures
Files
-
patch-H Hayat.zip.zip
-
Patch.exe.exe windows x86
35046c3cc81f6be4b985f4a75fef0f4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharNextA
oleaut32
SysFreeString
advapi32
RegSetValueExA
version
VerQueryValueA
gdi32
SetTextColor
msimg32
AlphaBlend
ole32
CoTaskMemFree
shell32
SHGetPathFromIDListA
winmm
waveOutWrite
comdlg32
GetSaveFileNameA
imagehlp
CheckSumMappedFile
Sections
CODE Size: 69KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
readme.txt