Static task
static1
Behavioral task
behavioral1
Sample
BeatPatcher.exe
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
BeatPatcher.exe
Resource
win10v2004-20230220-en
General
-
Target
BeatPatcher.exe
-
Size
336KB
-
MD5
6156320d6f2ea1e88a87576d1172d6e2
-
SHA1
075808a3c7e3b412a95d5ce263cefa6f542079af
-
SHA256
afa6da05e16c692e08ebf4ec526c9c14d60bcc5f54f458b94e438caa3ab59787
-
SHA512
6c1cedbbd2462ff43a7f2060375c0bc6c9e2f6840e5ac2455231c0c9e18692fedf6c412f0d77ea363f29d6b9140cc42c161175cb6150edefd0102c7eb2d3f1f8
-
SSDEEP
6144:g2Q4C/neAjD3cwb+fFDFkPe1fpzwHuaUVysgp+WAlx7wEwXhIRWD5y9lVGiQCIDY:c/MwbWFpzwHWA4wEwXhIRWD5y9loiJyu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BeatPatcher.exe
Files
-
BeatPatcher.exe.exe windows x86
3642d6341ecb14329c474ca8472a910a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
ImageList_Add
ImageList_Create
ImageList_Destroy
InitCommonControls
comdlg32
GetOpenFileNameW
GetSaveFileNameW
gdi32
CreateDIBSection
CreateFontW
CreateSolidBrush
DeleteObject
SelectObject
SetBkColor
SetDIBitsToDevice
kernel32
AddAtomA
CloseHandle
CreateFileMappingW
CreateFileW
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
FindAtomA
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetAtomNameA
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReleaseMutex
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
_fileno
_strdup
_unlink
_write
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_chsize
_fmode
_initterm
_iob
_lock
_onexit
_setjmp3
_unlock
_wfopen
_wfullpath
_wgetcwd
_winmajor
_wmkdir
_wrmdir
_wstat64
abort
calloc
exit
fclose
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
longjmp
malloc
memcpy
memset
printf
realloc
rewind
signal
sprintf
strcat
strcmp
strcpy
strlen
strncmp
vfprintf
wcscmp
wcscpy
wcslen
ole32
CoInitialize
shell32
CommandLineToArgvW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW
shlwapi
SHDeleteKeyW
SHDeleteValueW
user32
AdjustWindowRect
AppendMenuW
BeginPaint
CheckMenuItem
CheckMenuRadioItem
CloseClipboard
CreateMenu
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DestroyMenu
DestroyWindow
DispatchMessageW
DrawTextW
EnableWindow
EndPaint
FillRect
GetAsyncKeyState
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDlgItem
GetForegroundWindow
GetGUIThreadInfo
GetKeyState
GetMessageW
GetParent
GetScrollInfo
GetScrollPos
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsDialogMessageW
IsIconic
IsWindowEnabled
KillTimer
LoadCursorW
LoadIconW
MessageBoxW
OpenClipboard
PeekMessageW
PostQuitMessage
RegisterClassW
ReleaseDC
SendMessageW
SetClipboardData
SetFocus
SetMenu
SetMenuItemInfoW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackMouseEvent
TranslateMessage
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE