Patch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Patch.exe
Size

905KB
MD5

1a0666959e4254fb910ae6abb01892d2
SHA1

c445128e5c48cf8451aae3ce2418d1f582678af9
SHA256

8346788af4fff88c2b3893d6474ec288599862462a6f7e34671f60e3b840e175
SHA512

28968453990105ce50f2578dccce1a316ee5cdaf90a6bb87b17e642ca99f96084c539420682843a830542398755bdd1b6e5d99cdbe8384da112ef9c365091af9
SSDEEP

24576:jVkctXW2zg0T+CavC43BmD8YQ9PmwkmTxvlFpYeUVJw:jVkctXBwPvBmDKwwkmFvl7YeUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Patch.exe

Files

Patch.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 863KB - Virtual size: 864KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE