maisakura[.]exexx | Triage

Sharing

Copy URL Twitter E-mail

General

Target

maisakura.exexx
Size

364KB
MD5

dbb5c74b58a777a498e4f7deab277cab
SHA1

f9c2fb7398c1cc1c18c7c49ffd75955a147f521a
SHA256

8fdf1b2809850293e4b76744a01e9497a4fa3cc0cadbda7c566d718762340c03
SHA512

65da8e67e410d830fb1be3084bc69d0ed1acc87d4e86ecf01fe8ac1068ae2502bc29afbfc64abb3e16aa82506e136ea8fd01b892e73e27815b04bf353741318e
SSDEEP

6144:ez1B7wGwf/QyKk32TRepzysEA4eNgZLS1BdkWYrnzmOLkfzxEZwC:m1cRAiO+aLS1Bven7LCzxEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
maisakura.exexx

Files

maisakura.exexx
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\7g0m0zk9blfy7\obj\Release\Warning.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ