FlashPatch[.]exe | Triage

Sharing

General

Target

FlashPatch.exe
Size

183KB
MD5

9f9aa110164af44b441f256e3e6bd109
SHA1

406f9c71fa545921089552a66b3a3bbae1610c4d
SHA256

2965f5b73da457b36b5f3e6332d7d7671076280bc36c5ecf18496085ea3762cb
SHA512

12f03e824ecef014f51cfb3e767c32db24c38e4d03d9461c61a5a68371e3410db29e04acaa2a6690deecb079122c4096db79f59944a500517e25c25abb9eb83d
SSDEEP

1536:hqR5x4yk27MQ0AdAbYt+1rjYzta+LJAyklxJA4keH:h+x4yk2YQ9uYg1KPJAyCxJA4lH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FlashPatch.exe

Files

FlashPatch.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ