e0872958b8d3824089e5e1cfab03d9d98d22b9bcb294463818d721380075a52d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0872958b8d3824089e5e1cfab03d9d98d22b9bcb294463818d721380075a52d
Size

32KB
MD5

79c7219ba38c5a1971a32b50e14d4a13
SHA1

b39b3a778f0c257e58c0e7f851d10c707fbe2666
SHA256

e0872958b8d3824089e5e1cfab03d9d98d22b9bcb294463818d721380075a52d
SHA512

773275dca2f5337c5b0713a8e137e1ca59d7739cc364a77873d9c742e126334248d4d9b10f002a695373dbadcb863be1615fa8afa6d3bf961cf51d44c5e1c043
SSDEEP

768:bEj9FSWZxm3eJ38Etub7B/iGkIJywnYwVMwfJhVRVmHUFeP+SVL/mVW5iV7uVSxH:gaSLub7W8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0872958b8d3824089e5e1cfab03d9d98d22b9bcb294463818d721380075a52d

Files

e0872958b8d3824089e5e1cfab03d9d98d22b9bcb294463818d721380075a52d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Saitama\Saitama.Agent\obj\Release\Saitama.Agent.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ