C:\Users\seanj\source\repos\Saiki K\Saiki K\obj\Debug\Saiki K.pdb
Overview
overview
7Static
static
3Saiki_K_Panel.rar
windows7-x64
3Saiki_K_Panel.rar
windows10-2004-x64
7MetroFramework.dll
windows7-x64
1MetroFramework.dll
windows10-2004-x64
1Saiki K.exe
windows7-x64
1Saiki K.exe
windows10-2004-x64
6Saiki K.exe.config
windows7-x64
3Saiki K.exe.config
windows10-2004-x64
3Saiki K.pdb
windows7-x64
1Saiki K.pdb
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Saiki_K_Panel.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Saiki_K_Panel.rar
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
MetroFramework.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
MetroFramework.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Saiki K.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Saiki K.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Saiki K.exe.config
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Saiki K.exe.config
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
Saiki K.pdb
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Saiki K.pdb
Resource
win10v2004-20240221-en
General
-
Target
Saiki_K_Panel.rar
-
Size
321KB
-
MD5
72a2921cd5876117fca2448c45c4d3de
-
SHA1
4bbcb36314e91cf8f26d5d6d69fc9bad3ddac287
-
SHA256
36422aca0c4e79bb860c82b62473ad96bd42196a35ba54bf7034cb148ee65ff9
-
SHA512
5297ff50e814da145b956ac08acd8aca612da0714d371dcc57ee23c4027f120aabb99b01b1433ef02ef16fc85cc7105941d102b1791218c5e674ecc8939031b2
-
SSDEEP
6144:wK+XyE3xsDOQNNJSJStGGOVbMQILOAQvbjy1RjoxeAURCrN0PhUZrAt4Ca1KnYru:B+X53xiOQDEJdGOhM9O7beXIejCR0Ph7
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/MetroFramework.dll unpack001/Saiki K.exe
Files
-
Saiki_K_Panel.rar.rar
Password: root
-
MetroFramework.dll.dll windows:4 windows x86 arch:x86
Password: root
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Saiki K.exe.exe windows:4 windows x86 arch:x86
Password: root
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Saiki K.exe.config
-
Saiki K.pdb