Behavioral task
behavioral1
Sample
Patch.exe
Resource
win10v2004-20231020-en
General
-
Target
Patch.exe
-
Size
165KB
-
MD5
2168a8de90a77888b4ee78cf904642e3
-
SHA1
7de578fb0e6b04645e29e238aec51afa4025081f
-
SHA256
2a264fd972e2e5b08f5c56badfe2956a0e397819f00a785265124d4b8da4f901
-
SHA512
ebe6310c589a270b731ea46c80ea9fe40a17dcf6cc9d0e5c15e9f2c788945237a5363ec531481b020072fba5421b298c142c5af821dd19c90f57e9dd7d129a00
-
SSDEEP
3072:NccJQhA1e6DT3txDuV4MWxyo0OtdjbrVEPsSxw3+BK:NcJN6DT3t5hxyRI3+Et
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Patch.exe
Files
-
Patch.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 716KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE