sadas[.]exe | Triage

Resubmissions

21/04/2023, 18:41

230421-xbq1rahd24 10

Sharing

Copy URL Twitter E-mail

General

Target

sadas.exe
Size

16.8MB
MD5

f9a55560038242c706758751e9302bd2
SHA1

c5bb064e8f036cc70108c2b0cb1e9488fb73150c
SHA256

058ff8110878fc7ff4641d3140c5c8a82e4942c0a13f45fddacd3849ace87937
SHA512

3a16e98796d4eceb56e40ad414a592da01a0a6ea95b08b9597abb0352e71d24f12538a7a9cf3f7c8b093eb194a6a920f46069ce3bbfc62db8bc1f2cdbad1f824
SSDEEP

49152:ZSxJNXkjgHYz2XwVbeO/jI2BfExZfgs2bKDCt2WawvjBZS5pRdi6yS91aDZk+E9u:p

Score

1^/10

Malware Config

Signatures

Files

sadas.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ