Static task
static1
Behavioral task
behavioral1
Sample
SaturnV3RatRemoved.exe
Resource
win10v2004-20240802-en
General
-
Target
SaturnV3RatRemoved.exe
-
Size
37KB
-
MD5
b198d6a23f7107177e9209a8439e14ba
-
SHA1
c7b088a0a79432070f21dcb038548ff83f592a44
-
SHA256
b468861bfa5048e008ba33b9b7d184e4a20494cd4010f47f3d0130758cf1b6a5
-
SHA512
b2891ce2342f1b64593309059df7799c9028b8fbff24829a99f8634ad9075bd5e2d6f4d8c96f54436e166cdaddbd1ae07df31f2dc3365fdad83195f8d3361c3e
-
SSDEEP
768:sPLQsXaWqvFy5Yscvtq/RyrZXj9zB6S13NdNf:sPLjmy53cFq/4t9zo03Nf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SaturnV3RatRemoved.exe
Files
-
SaturnV3RatRemoved.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ