Static task
static1
Behavioral task
behavioral1
Sample
Santaa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Santaa.exe
Resource
win10v2004-20231215-en
General
-
Target
Santaa.exe
-
Size
348KB
-
MD5
6c4ee5be723fe2d3c147956d500a209f
-
SHA1
87aea7cec3d4f65b2b4e8738724e8a28090b17a1
-
SHA256
974b705980668b3d9fd809501c581d7961db4a43304826edf136764c789a28b1
-
SHA512
fcdae818a3fb596d97a3db5dcf0b541706d07c01bf7fd4719d9b377ea28a489a61e8dba8ab4f7cef8bb0ac9182549bb9370adf328b46a084a938fa47ef540385
-
SSDEEP
6144:lAtbzGFDVkJTOClC8Pn+cufQX6MVUMyYvmeGJ0IFbm9xKao:+1JTpn+cufQjLVC0ibmf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Santaa.exe
Files
-
Santaa.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ