Static task
static1
Behavioral task
behavioral1
Sample
GrimPatcher.exe
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
GrimPatcher.exe
Resource
win7-20231129-en
Behavioral task
behavioral3
Sample
GrimPatcher.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
GrimPatcher.exe
Resource
win11-20240611-en
General
-
Target
GrimPatcher.exe
-
Size
19.3MB
-
MD5
5282979977332e7c7e77931b3ca4cf68
-
SHA1
c73eb8b7be6465e3b64592a66e954cf3a9020005
-
SHA256
b24701a1a2b84833a56a40758f363178c441ed3a99f38f2be435d6904f2ecfc7
-
SHA512
e0dee3910e2ad864c7ce60e4e4211241328574bbc48154c07db30b90f47cf49ead4fb5376e43b824941d6b7a6cc30256c49308f7110b70546571bc574eedd985
-
SSDEEP
393216:Vf4yLz73ACQD2u84ZSij40E3NNCi5V9v6UBVsqJrHdH5sRtY/3:VgopQD2xijnE3NIGji4smrHdH5s30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GrimPatcher.exe
Files
-
GrimPatcher.exe.exe windows:6 windows x64 arch:x64
a8369a581a563d51e3a921c67aa46d87
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHFileOperationW
kernel32
SetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.PETERGR Size: - Virtual size: 15.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PETERGR Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PETERGR Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ