saturn[.]bat | Triage

Sharing

Copy URL Twitter E-mail

General

Target

saturn.bat
Size

8.0MB
MD5

de7a844e3ba8757576fcd4877150b748
SHA1

1ea11aa004a0921896b5e8ba1d1bc2384f30d320
SHA256

6abd0f5536f58530b6b27d4904158feda7ddee564405665d81f1cda607dbeea0
SHA512

da0d92fc785e41abd14c0055ca44c708bf37fe1f27394e8639411017d11f308ffdb1daab9e432359e95cfa27090c4aabe7b58418e3bec024307a2b3cf8e3f6df
SSDEEP

196608:rw0x7LGT8zFIzRWFLatBoN9Hou4zwhNiu3Vok5acBxVY:r7x7LGT8ykFYoX6UhNDJrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
saturn.bat

Files

saturn.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ