SauronEye[.]exe | Triage

Sharing

General

Target

SauronEye.exe
Size

79KB
MD5

38b00838853a34787722cdbf180e9b53
SHA1

9750faab64bfd9da4a144b2489fe82c2acdefe19
SHA256

f6f865390750822cea504855053b4fe017001235f63f628f8433dab6f3b15582
SHA512

3eb9a8044db0d11c811d4f235625f46cec44de27ade6b7a64f78ad121c2daa34014597b6cb3832558e8b9b0dc2f0c3c7ff937cf54ed35b74fcb0df9423802187
SSDEEP

1536:1Vr7pSOdMc8gBe2uXGtNlcJV5/s6jCuW+bW4qFtjzuYNYndMqqG7:FiSNKV5/syD9ixGYPG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SauronEye.exe

Files

SauronEye.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\1\s\src\SauronEye\obj\Release\SauronEye.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ