1c8_unipatch[.]exe | Triage

Sharing

General

Target

1c8_unipatch.exe
Size

11KB
MD5

c8660d633a97ca94facb3a2613b36d28
SHA1

81ca77cd0419af5e89dbd7998d958bd4078857d1
SHA256

8a32e3f2a17fb3cfc8f64c59f25c1b6d5f7f05342591becf47c5129e876fcdc5
SHA512

492c4ce26ecc3993da6955ebe1b43b21cbe5b848339b89c68e42ec159df86afc9d20eab0de825690e718942ba212a4649a99eae55a32a29aea480befc7806047
SSDEEP

96:J6Ks86q/AeqT1wSwaqC2bzM+cLlcaRIuc2S8abROz/SpIQI1OYUEwY8ayModSuCc:Nw1qa5M9mIultqI1TJhc1CsWQN1uyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c8_unipatch.exe

Files

1c8_unipatch.exe
.exe windows:4 windows x86 arch:x86

6ada5fb0e22a29b13118a2ba94444b7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ReadFile
GetFileSize
VirtualAlloc
WriteFile
ExitProcess
CreateFileA
SetFilePointer
CloseHandle

user32

MessageBoxA

comdlg32

GetOpenFileNameA

imagehlp

MapFileAndCheckSumA

Sections

.text
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ