Patch [x64][.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Patch [x64].exe
Size

139KB
MD5

47b5e872f0aa9c1a5653495d921f07c2
SHA1

c72c1a3b6affd2adcb828ffdca4d149b5ccbed3b
SHA256

c4ceb2c036628200a644592605e8fbc2b6a7b1046a2847d46db5a2f2a589cc0a
SHA512

f1c7767331a80b3859b19f3386f052af2e1a4c76cb7053667a43ccf4d8b53134a279848a8184d03d599d8a6e34e3a63802f7a4fbec00b1eb54176453da591c04
SSDEEP

1536:Eetv/a4f7VL8avZpjdublAGrVmZQOlLKuvdN4xrUfoqKhUXRlTjdsL7F:jtvl7VoavZiZFhmmYmuvdW1UoohPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Patch [x64].exe

Files

Patch [x64].exe
.exe windows:5 windows x86 arch:x86

dc73a9bd8de0fd640549c85ac4089b87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ