Patch[.]exe | Triage

Resubmissions

Sharing

Copy URL Twitter E-mail

General

Target

Patch.exe
Size

686KB
MD5

8189f9c1010a7469fab45da2b86167b8
SHA1

da3d5552df833f15cc4351a1e1b30bd153ae8afd
SHA256

e1c4a06ee524137aad7e5cae215c9a22ad63a98da371678adb3673fd4f553e1e
SHA512

29f4fba6af6b6f9035a4f0ed26ce6f1770a1b2d9542c942e02ecc1449637f652a074f5b1d21e82bd068af719201b5392fbaa7643ea06eb5e8dcdd5cbc2b7cd49
SSDEEP

12288:Jq90eT6VxRwRAb7Dnk/CaI43AwwCpCfaoTfRtHbwTnsCQt2ta60odjKkkHbL/+Or:Jy/6XRwWnChL3Aww5rRFE86i9bLBT60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Patch.exe

Files

Patch.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 644KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE