Sa6oRkit[.]exe | Triage™

General

Target
Sa6oRkit.exe
Size 293KB
Sample260627-ws68macx7l
SHA256 c94d5a8be8ece95dc54d67dc0926c7c7be66976d8cbdfdb5384f7479e20ca621
MD5 ddb135f00bbce9b2c12f3cf362b27261
SHA1 f0a8c11c8a4e8694e689183597dcad45a1dcc020
SHA512 e8790c96b550ecb56ac431e86b416c49deab5c988a8d44552ed4e0db40adf1e8fa3a42eb028288c007bf89e8ff84572f21191d908364b8f933df950000993341
SSDEEP 3072:WINBu9mdt7av3jnrudHD+EzLBauwMpO+hEApWdGSHcWASMuoEeCaTZkmKNLO/uOs:WSuEtueyIBZmqAT
TLSH
T1DA547451AEA67FC2C013B7B5472BC6104B25AD0555318628D8B7F2CCF93F2899D23F9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sa6oRkit.exe

File Explorer

Sa6oRkit.exe

.exe 293KB

Sa6oRkit.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c94d5a8be8ece95dc54d67dc0926c7c7be66976d8cbdfdb5384f7479e20ca621
MD5 ddb135f00bbce9b2c12f3cf362b27261
SHA1 f0a8c11c8a4e8694e689183597dcad45a1dcc020
SHA512 e8790c96b550ecb56ac431e86b416c49deab5c988a8d44552ed4e0db40adf1e8fa3a42eb028288c007bf89e8ff84572f21191d908364b8f933df950000993341
SSDEEP 3072:WINBu9mdt7av3jnrudHD+EzLBauwMpO+hEApWdGSHcWASMuoEeCaTZkmKNLO/uOs:WSuEtueyIBZmqAT
TLSH
T1DA547451AEA67FC2C013B7B5472BC6104B25AD0555318628D8B7F2CCF93F2899D23F9A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

301318

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\D0sa-\Downloads\Sa6oRTools-Pass-123\MasonKit-SRC\SourceCode\Masonkit\obj\Debug\Sa6oRkit.pdb

Sa6oRkit.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Sa6oRkit.exe

mscoree

dotnet