Sav Editor(Alpha7)[.]zip | Triage

Sharing

General

Target

Sav Editor(Alpha7).zip
Size

109KB
MD5

cb7d95674229831f9e1de37b967e3534
SHA1

75653d8c89e6dbd0c85eb9420fdc721c960ae85b
SHA256

741f236e0d9d7c42104040f57e64545d8695ab79992440c2fcc4b96f6aed3931
SHA512

d785bc258b17f3f17a156533ba0c738dcb8239f1aaebbb22fe8e094c5ea94a58dc0d4485abef8aa9c65f56fd8454bac8078d752c729b8e29f4185835a94f6077
SSDEEP

3072:roUmYmtiVfP4XjYtMf7v0om4sgedKOxDXqL3/SFYL:rJmstgTIMf7v/mpoOVqL31L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Sav Editor.exe

Files

Sav Editor(Alpha7).zip
.zip
Sav Editor.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ