Program_patched[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Program_patched.exe
Size 26.8MB
Sample260802-st168aca22
SHA256 2e7f0cf91db068492b46967ccb3d283ebefef81ddbea7238f93605eafa5f0b77
MD5 ac86421847906a48ea962682f794361a
SHA1 90f69111d11b74b457377da2d5933f56f4a9e3ee
SHA512 cadb29f57163fec15ec509205ad31c4f4be2be2b3760e9a804a551c0b17567ac51bad524ab512c118b763213a54a5a6e28f371ca3c71e9d472ce61f790fe95e0
SSDEEP 786432:4Dquz4T297ze8ETu+jROR6TU+WHffK/YC:4Ei5S87+tOoU+WHf
TLSH
T15F5712D678E191ACC492C634D3891BFDE1E979894DB5942FBFC608123A30D9ACCF5932
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Program_patched.exe

File Explorer

Program_patched.exe

.exe 26.8MB

Program_patched.exe

IMPHASH e71e23477bf52a791252575d6d6cca27
SHA256 2e7f0cf91db068492b46967ccb3d283ebefef81ddbea7238f93605eafa5f0b77
MD5 ac86421847906a48ea962682f794361a
SHA1 90f69111d11b74b457377da2d5933f56f4a9e3ee
SHA512 cadb29f57163fec15ec509205ad31c4f4be2be2b3760e9a804a551c0b17567ac51bad524ab512c118b763213a54a5a6e28f371ca3c71e9d472ce61f790fe95e0
SSDEEP 786432:4Dquz4T297ze8ETu+jROR6TU+WHffK/YC:4Ei5S87+tOoU+WHf
TLSH
T15F5712D678E191ACC492C634D3891BFDE1E979894DB5942FBFC608123A30D9ACCF5932
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29574165

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

177KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Y.`

Size

Virtual Size

16.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.6b~

Size

512B

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.E?.

Size

26.8MB

Virtual Size

26.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Program_patched.exe

user32

comctl32

kernel32

advapi32

gdi32

generic