Static task
static1
Behavioral task
behavioral1
Sample
Patch.exe
Resource
win10v2004-20240611-en
General
-
Target
Patch.exe
-
Size
150KB
-
MD5
01f812c31b6d11fa5ef28afafb5c7279
-
SHA1
7829e2e7b8e72f1c56ddd865c4784f85aa43f36c
-
SHA256
3b5a5fafb3de31a0e7cb9dcfb1f0d06beef35e3ca89763f70ed824cee4a9b40b
-
SHA512
e0b53a930823f76182131bfe712e570f0976fb7c37b21e7bfca7672101e35063a3db8d0d4516dcf17bb3c57185c93933cbbffe4e69d97d4190889b0b7c823f79
-
SSDEEP
1536:ywWC88bZWt9qol2r+E3aUE1qCEwsOaQeea5PvgsK+WiyIYhdpbs4zYTMD+5Lav:g85r6aVDc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Patch.exe
Files
-
Patch.exe.exe windows:4 windows x86 arch:x86
Password: xZXzxZXZxzx
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ