Patch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Patch.exe
Size

60KB
MD5

619644bfbe406d14d4d875e9396a68ea
SHA1

7ae8d0194eb9b281226a1d62b8884810436abd4e
SHA256

4d87eda0985823d7e62c55da7493bf7c28c47a8aa81b469d8d1e13f2deaab61e
SHA512

d1d54d3604b7f17124d4ab19611919e9190d3b3d5679f06c7e26fc8103c717dd7c2549c08ab1c6938553b957325500869d8fedc3080b74112732c3cd470ea004
SSDEEP

1536:hKfqT90vNsVAuT9IysphZRqWeNVBf90+5:kquFBhZRqWiLe+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Patch.exe

Files

Patch.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ