Savior[.]cc (1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Savior.cc (1).exe
Size

128KB
MD5

d3eed799e9fbc5daa6de933457f53df1
SHA1

076349caa0ae9f23893833516eb57b1a16295aeb
SHA256

ea1e851483e5cdcaefd27e4944d9b6a35850bc27024c14c5068602a75d16dda0
SHA512

a38a6dcdf3342a75f88f42c6045364e7ebcaaa970407b7b36561a4ae4c3fe17607534093e42a642bcdca6f4e3695c4ce3dd61ed636175d1f414e2f4152cd848e
SSDEEP

3072:cYMIkevGi/OfIqvGE3vpoK7R9B90/M7WDfFbOBvPMU:Ii/vqvGEJ7E+vU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Savior.cc (1).exe

Files

Savior.cc (1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Savior\Downloads\Malaia.cc free spoofer\Hollow.cc\obj\Release\Savior.cc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ