Packed[.]Win32[.]PePatch[.]bv[.]7z

Sharing

Copy URL Twitter E-mail

General

Target
Packed.Win32.PePatch.bv.7z
Size 344KB
Sample260704-cfsd6aev7n
SHA256 8fb9487e123f5b99ab630e704d75c29b4dabbed4533aac15d930775ab10f46e2
MD5 cf87881f79bf2e5edf6edcd62cefa9bd
SHA1 33dceabf46e56c06786e812acb163aa77b43964f
SHA512 3628b4a8e8bcdebd8f8082734af0778bacf35e42a26e31ec3aa8418e958e4b2e9185b8409b4debeaa5c0d6046b6324d8d59a056c2495dbd1da6cc97a89924c3d
SSDEEP 6144:oC/DLeFU+1QMz0mc9/lg51oj9YKgGymZqzax6ROcfHdvt81tc7v9660oQeHm4340:nbLHfMz0mue56j9AiDxkOG9eHcjHf7GU
TLSH
T17B7423DA0494FED91021D413AB7106F095813C459DDBB8AE77FD02AEF2B1EB61B64C2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Packed.Win32.PePatch.bv.exe

File Explorer

Packed.Win32.PePatch.bv.7z

.7z 344KB
Packed.Win32.PePatch.bv.exe

.exe 375KB

Packed.Win32.PePatch.bv.7z

SHA256 8fb9487e123f5b99ab630e704d75c29b4dabbed4533aac15d930775ab10f46e2
MD5 cf87881f79bf2e5edf6edcd62cefa9bd
SHA1 33dceabf46e56c06786e812acb163aa77b43964f
SHA512 3628b4a8e8bcdebd8f8082734af0778bacf35e42a26e31ec3aa8418e958e4b2e9185b8409b4debeaa5c0d6046b6324d8d59a056c2495dbd1da6cc97a89924c3d
SSDEEP 6144:oC/DLeFU+1QMz0mc9/lg51oj9YKgGymZqzax6ROcfHdvt81tc7v9660oQeHm4340:nbLHfMz0mue56j9AiDxkOG9eHcjHf7GU
TLSH
T17B7423DA0494FED91021D413AB7106F095813C459DDBB8AE77FD02AEF2B1EB61B64C2E
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Packed.Win32.PePatch.bv.exe

SHA256 80400f573ea9f783c8e7172960687c6cf67b5647b3ed48236253a50e8579ac3f
MD5 34bb9aa84e12a2fa33a3402e4de31ef7
SHA1 4ce43e549678fdf783ef1658f3ee2f0f273ea352
SHA512 8a17646fe00cfd66366deb3fc691d1dbe4c16b1819d514370f5533cf3a5bb334c7d4c9c046b02817a065ac08c428ea309ca25c9000242b6d52f33e2ea71b2a6a
SSDEEP 6144:2IRatBisGvph2eRQVuINb9YtXhZb9W8o8yVnx++arS+tbqbC8q:tRatwRh2Oqb9YJhZbO++J+tGbq
TLSH
T1A8842343ED67886AC94D89B1E944DF2BFDB9EA7139BB6DA38881054EBC77220C45C341
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

413708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

756B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

596B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

362KB

Virtual Size

362KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.MaskPE

Size

512B

Virtual Size

291B

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Packed.Win32.PePatch.bv.7z

Packed.Win32.PePatch.bv.exe

generic