sad[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sad.exe
Size

710KB
MD5

39238d3106d8a18e3081ec15d63c4a50
SHA1

5ac50f8dc49ef910048f3c3b7f3de63ff7968780
SHA256

bfe9ccad93f482af3f86b7ef3a6cb7325b28058f3d18ab28511cddc5cb63d57e
SHA512

498e15e814c97817bc3ae227ed41763c02a0561159721a103b01ee34cf6adf31a210dbe28c4104390c54f161e679863f4a437004eefb5b0c2e5ea31660283dc2
SSDEEP

12288:CUTOS2x2tFk8KavzURHTfAUu3MGO4QUr1HXWTMGCmJKyVpO/vDFaDRV:CUw82SSHS3MGO4QU5mYVp/vAD

Score

1^/10

Malware Config

Signatures

Files

sad.exe
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 686KB - Virtual size: 686KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ