Saitona2[.]loc_1_1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Saitona2.loc_1_1.exe
Size

1.1MB
MD5

2704c5ee54f7830a206d19468457873a
SHA1

92629c95a8b7ba13b3f34446f742fcd64d15d290
SHA256

449ae9904150e6f178f32e946c79d75b02c91681eda91a73288255d816804bf5
SHA512

8a4530ae7da1f0030eaf047431bded1dd681dc1fe29895787f35a5baf47f2cdd7706a2c54efd44a1c7e7ab454590488373dba7f0d2aed5df84d525c4faab00ab
SSDEEP

24576:IA3u0j05EyFyiskjPPv8cybdo4mz1U8z29H:vMJD7jHEbS4mzcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Saitona2.loc_1_1.exe

Files

Saitona2.loc_1_1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\ekosi\AppData\Local\Temp\b9bdbe47-c4db-4335-97b8-148ac7ff7afc\obj\Debug\LockedDocument.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ