Patch.zip
- SHA256 45f36a1392dc6e4d8c3f03dcd1861b7a105f2549c14dfcea0431ecc3aba0c32c
Static task
static1
1 signatures
General
- Target Patch.zip
- Size 62KB
- Sample260825-raw8gsaq2s
- SHA256 45f36a1392dc6e4d8c3f03dcd1861b7a105f2549c14dfcea0431ecc3aba0c32c
- MD5 b68797124dd5f49fecdf52db59b25955
- SHA1 7c92b9f2189e370cfecda89502607a6f37ae4922
- SHA512 a4d63bb61804320abe0af64dc1dc4dd3324a98932e60c2a69919254abe360f23ebfe7cf2e45ac69e8b8c102aa8dd181b2a8e5ab026c83b5d378a108b50432ffb
- SSDEEP 1536:pjRg+10B0u02/nQlpvGNSlTGBF8y4GWbLj0xMDp/Fn6Z+x1SR:9K+1eNC+N0SX8y4zcg+zR
- TLSH T19F530239E934829A8F15E8E707AA3040647EAED2EE73342254452C67D4429CF4DD7CFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Macrium_Reflect-7.x_8.x-patch.exe
File Explorer
-
Patch.zip.zip 62KB
-
Macrium_Reflect-7.x_8.x-patch.exe.exe 66KB
Macrium_Reflect-7.x_8.x-patch.exe
- IMPHASH dc73a9bd8de0fd640549c85ac4089b87
- SHA256 e4152620b9c4b5ebb73678d6c8aedddd784a41f80412dcd1d89527e3160f756a
- MD5 60f7348c6f666071e3969d16a278711e
- SHA1 5ec5f17e237c1d9991c4aae56f093372421771b0
- SHA512 1d4027b7bb8bb68d21497293fb611d9a499cb192e0abc2c10690eb86f498e424ea206ee207354297c952fef093f6656d98720e1bd4bea982d447a869cbba4b2c
- SSDEEP 1536:6TL5Kt5xaXJ/pvGNSlTGBF8y4GubLj03uxfbnxDLv5j:6T4WR+N0SX8y4RdFbnhR
- TLSH T12063F1928F01215BD054DDB246E70AE05CBCB493D466746BB3D4083B8F4689BE99BCBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
4139
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
DeleteFileA
ExitProcess
FindResourceA
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
LoadLibraryA
LoadResource
RtlMoveMemory
SizeofResource
VirtualAlloc
lstrcatA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
Name
.text
Size
512B
Virtual Size
502B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
82B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=18, version=8444,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=17, id=1, productName=Unmarked objects,
count=1, id=158, productName=VS2010 build 30319, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,