Harbi2Patcher[.]exe

Resubmissions

10/08/2026, 09:13

260810-k6ws9sel217

10/08/2026, 09:09

260810-k4xmsavfrf3

Sharing

Copy URL Twitter E-mail

General

Target
Harbi2Patcher.exe
Size 2.1MB
Sample260810-k6ws9sel21
SHA256 b8c6cc06217bf16bcc64579618aee7c342ad59921a6804f245a46344d0601163
MD5 d51c8e8398660ba5a18345b85d55a2e0
SHA1 7579b7241fde2102d51d4e8836c3629bc6772da4
SHA512 11398fdb0817f1eddfa971bdad55986898f7b79ccfa1460ac77f2cd42d3ec2c3bf46457af00f6b733bc9e380cfc0e93f654c1835e366e5629c632f1cf7c19b43
SSDEEP 49152:9niqptx9F/eIrSbxWn1rlr/306XTDmLBUen:hA1Wn1rlr/306+V
TLSH
T1FBA5BF57F7AA82AFD16B8138C5519207E7F1B464273287CFE29459696F132F02F3A342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Harbi2Patcher.exe

File Explorer

Harbi2Patcher.exe

.exe 2.1MB

Harbi2Patcher.exe

IMPHASH a5bd1f3941ad5313f4e16c1c5633cb2c
SHA256 b8c6cc06217bf16bcc64579618aee7c342ad59921a6804f245a46344d0601163
MD5 d51c8e8398660ba5a18345b85d55a2e0
SHA1 7579b7241fde2102d51d4e8836c3629bc6772da4
SHA512 11398fdb0817f1eddfa971bdad55986898f7b79ccfa1460ac77f2cd42d3ec2c3bf46457af00f6b733bc9e380cfc0e93f654c1835e366e5629c632f1cf7c19b43
SSDEEP 49152:9niqptx9F/eIrSbxWn1rlr/306XTDmLBUen:hA1Wn1rlr/306+V
TLSH
T1FBA5BF57F7AA82AFD16B8138C5519207E7F1B464273287CFE29459696F132F02F3A342
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

833168

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

VirtualProtect HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetModuleFileNameW TerminateProcess ExitProcess GetCurrentProcess SetFilePointerEx GetConsoleOutputCP WriteFile ReadConsoleW GetConsoleMode FileTimeToSystemTime LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers SystemTimeToTzSpecificLocalTime GetFileInformationByHandle GetDriveTypeW HeapReAlloc SetStdHandle SetEndOfFile IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetExitCodeProcess CloseHandle GetLastError HeapSize WriteConsoleW GetTimeZoneInformation FreeLibraryAndExitThread ExitThread FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer TryAcquireSRWLockExclusive GetSystemTimePreciseAsFileTime GetLocaleInfoEx FormatMessageA GetFileInformationByHandleEx AreFileApisANSI CreateFile2 Sleep WaitForSingleObject GetModuleFileNameA QueryPerformanceCounter FreeLibrary VerSetConditionMask GetProcAddress QueryPerformanceFrequency LoadLibraryA GetLocaleInfoA RtlUnwind GetModuleHandleA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc DeleteFileW SetFileInformationByHandle MultiByteToWideChar GetModuleHandleExW ReleaseSRWLockExclusive AcquireSRWLockExclusive SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection FormatMessageW SleepEx GetTickCount GetFullPathNameW MoveFileExW WaitForSingleObjectEx CreateThread GetEnvironmentVariableA GetStdHandle GetFileType ReadFile PeekNamedPipe WaitForMultipleObjects VerifyVersionInfoW CreateFileW GetFileSizeEx LocalFree WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW

user32

GetDpiForWindow SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor SetCapture LoadCursorW GetForegroundWindow GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture ScreenToClient GetMessageExtraInfo GetKeyState UpdateWindow PostQuitMessage TranslateMessage MessageBoxA PeekMessageW DispatchMessageW ShowWindow RegisterClassExW UnregisterClassW GetSystemMetrics DefWindowProcW GetWindowRect SetWindowPos FillRect CreateWindowExW

gdi32

CreateSolidBrush DeleteObject

advapi32

CryptCreateHash CryptEncrypt OpenServiceA OpenSCManagerA CryptDestroyHash CryptDestroyKey CryptImportKey CloseServiceHandle QueryServiceConfigA CryptGetHashParam CryptReleaseContext CryptAcquireContextW CryptHashData

shell32

ShellExecuteExA ShellExecuteW ShellExecuteA

ole32

CoUninitialize CoCreateInstance CoInitializeEx

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext ImmReleaseContext

d3dcompiler_47

D3DCompile

dwmapi

DwmSetWindowAttribute DwmDefWindowProc DwmExtendFrameIntoClientArea DwmEnableBlurBehindWindow

ws2_32

ntohs gethostname ioctlsocket sendto recvfrom getsockopt send WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAResetEvent WSAWaitForMultipleEvents closesocket WSAGetLastError htons socket freeaddrinfo WSAStartup WSACleanup accept bind connect getpeername getsockname recv setsockopt WSASetLastError WSAIoctl __WSAFDIsSet select htonl listen getaddrinfo

crypt32

CertFreeCertificateContext PFXImportCertStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW CryptQueryObject CertCreateCertificateChainEngine CryptStringToBinaryW CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain CertFindCertificateInStore

bcrypt

BCryptGenRandom

secur32

InitSecurityInterfaceW

iphlpapi

if_nametoindex

Name

.text

Size

1024KB

Virtual Size

1023KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Harbi2Patcher.exe

d3d11

kernel32

user32

gdi32

advapi32

shell32

ole32

imm32

d3dcompiler_47

dwmapi

ws2_32

crypt32

bcrypt

secur32

iphlpapi

generic