Patch[.]exe | Triage

Sharing

General

Target

Patch.exe
Size

505KB
MD5

76ad2c7862080cc3f9118ec3c19200a9
SHA1

c413179011ff35620111b4aeba6b17e49f7530d8
SHA256

61216c38f1548b6184092869820343d2e5155fcf1986680e2e259c24239d92a6
SHA512

5864e34c529a0ac0bbe42d7fae3849b933e1d3bb938b75c32c9d7b15e981f8708faabc6000bcd6ea4d63d1292108218b6ac6153ccacefafbdf9ab2a27b662e79
SSDEEP

12288:jLmKY0ilpMcUERhLC+j8BqoK8fwpu8tpmqd+yxD:jLmKYacUchLC+oXQu8fT+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Patch.exe

Files

Patch.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 470KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ