SaraSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SaraSetup.exe
Size

242KB
MD5

3bc8a17204a5b544d558c204fda69d4b
SHA1

383180e88cc9dbf429780c08286c8762029bf4d9
SHA256

7dd1d3a395222e642862a7aa9b60c82cecaa26f5e3b4f5477221c52997db55f4
SHA512

9949f884519eddc4860f6be6ed2911ec0d82cce69611a95a1adc70b00de129375a5a1d0e28a2f19269da8d84ee32271c6a8743771882a2d7b88f65ca68957e7f
SSDEEP

3072:peLdMtx3Zy7vWVXbBtE8gTL6tJZUw9u1W+psdUcFi8r:peek8

Score

1^/10

Malware Config

Signatures

Files

SaraSetup.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:61:7e:00:9f:99:f4:fb:f9:78:78:16:6b:c8:45:ef:a1:02:40:bd:e5:a8:84:53:73:72:b5:73:a6:f5:1e:e4
Signer

Actual PE Digest

ac:61:7e:00:9f:99:f4:fb:f9:78:78:16:6b:c8:45:ef:a1:02:40:bd:e5:a8:84:53:73:72:b5:73:a6:f5:1e:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

ac:61:7e:00:9f:99:f4:fb:f9:78:78:16:6b:c8:45:ef:a1:02:40:bd:e5:a8:84:53:73:72:b5:73:a6:f5:1e:e4Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 162KB - Virtual size: 162KB

.rsrc Size: 70KB - Virtual size: 70KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

ac:61:7e:00:9f:99:f4:fb:f9:78:78:16:6b:c8:45:ef:a1:02:40:bd:e5:a8:84:53:73:72:b5:73:a6:f5:1e:e4
Signer

.text
Size: 162KB - Virtual size: 162KB

.rsrc
Size: 70KB - Virtual size: 70KB

.reloc
Size: 512B - Virtual size: 12B