sda[.]exe | Triage

Sharing

General

Target

sda.exe
Size

5.2MB
MD5

2e0bd8d62271ed9518462d6d2b620273
SHA1

6efdf0f1e2d3427abf3fa392c568672126235359
SHA256

3122813217fea7ef0ab13642c40a94975a6d960c4a59f669df5a1f90becd8c06
SHA512

01872e247b70703e40d4ef98c7be7f9d843ab28364b11658fa387ed17a721603366288958603d8fd265a34b61664c2be15ac42fad092fcf3019a4882a1905f23
SSDEEP

24576:CyS04YNEMuExDiU6E5R9s8xY/2l/dRJ5dtsPxNGfyi1Ibt+r8:Cu4auS+UjfU2T/5XDxIbt+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sda.exe

Files

sda.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ