Static task
static1
Behavioral task
behavioral1
Sample
patch/patch.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
patch/patch.exe
Resource
win10v2004-20231215-en
General
-
Target
46ef4568e97de371d1c7b2c2a6e8a4ad
-
Size
1.8MB
-
MD5
46ef4568e97de371d1c7b2c2a6e8a4ad
-
SHA1
038e40e324ac90a9ae33dd4b621e78ed9443c32b
-
SHA256
45cc50966b090e13766b3f6dfe62a3cfa1928d8f32ae1b96831e079108e3b7c1
-
SHA512
b15c5d86ec1bc9681e9f12355780e6ef4f68f1facbe405e38b6820b58c0dfc27c3f738459360a41969618c84e04353ece00d9a6699367dce77cc84bc34bf1bd5
-
SSDEEP
49152:500Gel41NJqGbPm9OCzQ1wDU3jvTo9v8jIh8hYsNUb:5OL1Fm95U7r0uy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/patch/patch.exe
Files
-
46ef4568e97de371d1c7b2c2a6e8a4ad.zip
-
patch/patch.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 672KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE