BraveOriginPatch[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BraveOriginPatch.exe
Size 1.3MB
Sample260930-n627tswarg
SHA256 c685b1c4dbb8b430ef8b7345a87ff561d89af6857bc056d2ded848a4272dc408
MD5 f943b3ead673af3eda260fb8c5eea25c
SHA1 2c04066d2c464b0653123dc4fb52ba03d960d8f8
SHA512 f88ab98aac8cde3cc1406ca9a4ecf0e2976c0057847c672096b3daf7eead5953015ea6d796b08a6114f8d46d6cb4cf743d77ce47855ceae0ec6703eb531d6e56
SSDEEP 12288:NCqOneD/Zplom8/U/dj0rMZXFTGn4Y4xLVQHsFAj7YrdNSHA6fnQFOap1/YcXQU:kqEisU/djlXEn4Jaj8rYap1/YcXQU
TLSH
T1AE552A4322931CAADED26B7854DBA33DA734BFB08E768B276914F13469336C16C1E750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BraveOriginPatch.exe

File Explorer

BraveOriginPatch.exe

.exe 1.3MB

BraveOriginPatch.exe

IMPHASH 22c48142c6c7281db4f57f1b803d8e60
SHA256 c685b1c4dbb8b430ef8b7345a87ff561d89af6857bc056d2ded848a4272dc408
MD5 f943b3ead673af3eda260fb8c5eea25c
SHA1 2c04066d2c464b0653123dc4fb52ba03d960d8f8
SHA512 f88ab98aac8cde3cc1406ca9a4ecf0e2976c0057847c672096b3daf7eead5953015ea6d796b08a6114f8d46d6cb4cf743d77ce47855ceae0ec6703eb531d6e56
SSDEEP 12288:NCqOneD/Zplom8/U/dj0rMZXFTGn4Y4xLVQHsFAj7YrdNSHA6fnQFOap1/YcXQU:kqEisU/djlXEn4Jaj8rYap1/YcXQU
TLSH
T1AE552A4322931CAADED26B7854DBA33DA734BFB08E768B276914F13469336C16C1E750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

gdi32

CreateFontW CreatePen CreateRoundRectRgn CreateSolidBrush DeleteObject GetStockObject LineTo MoveToEx Polyline Rectangle RoundRect SelectClipRgn SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CopyFileW CreateDirectoryW CreateEventA CreateFileW CreateProcessW CreateSemaphoreA CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DuplicateHandle EnterCriticalSection FileTimeToLocalFileTime FileTimeToSystemTime FlushFileBuffers FormatMessageA GetCommandLineW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFinalPathNameByHandleW GetFullPathNameW GetHandleInformation GetLastError GetLocalTime GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetStartupInfoW GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount GetTickCount64 InitializeCriticalSection IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LocalFree MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA Process32FirstW Process32NextW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReadProcessMemory ReleaseSemaphore ReplaceFileW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleOutputCP SetEvent SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SuspendThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile lstrcmpW

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _assert _beginthreadex _cexit _commode _endthreadex _errno _fileno _fmode _initterm _lock _read _setjmp _setmode _strdup _unlock _vscprintf _vsnprintf _wcmdln _write abort atexit calloc exit fflush fprintf fputc fputs fputwc free fwprintf fwrite getenv isleadbyte localeconv longjmp malloc memchr memcmp memcpy memmove memset realloc signal strchr strcmp strerror strlen strncmp strtoul vfprintf wcslen

ole32

CoInitializeEx CoTaskMemFree CoUninitialize

shell32

CommandLineToArgvW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteW

user32

AdjustWindowRectEx BeginPaint CreateWindowExW DefWindowProcW DestroyIcon DestroyWindow DispatchMessageW DrawFocusRect DrawTextW EnableWindow EndPaint EnumWindows FillRect GetClientRect GetMessageW GetSystemMetrics GetWindowTextW GetWindowThreadProcessId InvalidateRect IsDialogMessageW KillTimer LoadCursorW LoadIconW LoadImageW MessageBoxW PostMessageW PostQuitMessage RegisterClassExW SendMessageW SetTimer SetWindowRgn SetWindowTextW ShowWindow TranslateMessage UpdateWindow

Name

.text

Size

315KB

Virtual Size

314KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

200KB

Virtual Size

200KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

1020B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

BraveOriginPatch.exe

comctl32

gdi32

kernel32

msvcrt

ole32

shell32

user32

generic