Patch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Patch.exe
Size

916KB
MD5

fdcb7cbc10ae5e9a185abc8522ea8585
SHA1

b7c5a58e508cb42a67ae0a0d25b06ebb7fb25d69
SHA256

4542197f468d6e9c423a1165fd1fb1863b2d7c1215042cbe70ebafef37a889fd
SHA512

394169f3623728c4c9ff8002147fbe9040ec21633536aa9d55516317a04e480a275c6dfdd8e7a647e741d93fc2044c056df43f973383c56bfe9fcc52ad635621
SSDEEP

24576:HhbmN3+1kNUh90d9r6Ng74V644vLe0ZSQiJ:BbmNskNUH0P2NA4V1iLe0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Patch.exe

Files

Patch.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 875KB - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE