SAKURAA[.]dll[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
SAKURAA.dll.bin
Size 3.4MB
Sample260808-wfpstasaph
SHA256 15fea3cbd7ff42d5f8458bb8f46b05c3ffea5724b760f91eb4c658b89d82876a
MD5 35440f3e6ac74cccb192b3c23a2b95ef
SHA1 45c62c69d3b64abfed6f674175fc3638e8090616
SHA512 c80f28f7ec94b0b7e6544c7787aaa472d4253fc1562ea89166000c1d129fabc3dd65a475e4a1bd232bc4f88393afee717f93c2fa0087071f36b4b3fd5ea2ec19
SSDEEP 49152:JD59DZ88NHfxCDKWyoZDigpwnWbC63yoPcL96K2+buYLC32MBt1lzo:JDJlZUMewnyN3yD52+bDLCGMBtDk
TLSH
T1EBF523C628C34D71E01BFB75829B7A6CF01E3BA14A669E5F37896D84CF63611843B742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SAKURAA.dll.bin

File Explorer

SAKURAA.dll.bin

.dll 3.4MB

SAKURAA.dll.bin

IMPHASH 6c8408bb5d7d5a5b75b9314f94e68763
SHA256 15fea3cbd7ff42d5f8458bb8f46b05c3ffea5724b760f91eb4c658b89d82876a
MD5 35440f3e6ac74cccb192b3c23a2b95ef
SHA1 45c62c69d3b64abfed6f674175fc3638e8090616
SHA512 c80f28f7ec94b0b7e6544c7787aaa472d4253fc1562ea89166000c1d129fabc3dd65a475e4a1bd232bc4f88393afee717f93c2fa0087071f36b4b3fd5ea2ec19
SSDEEP 49152:JD59DZ88NHfxCDKWyoZDigpwnWbC63yoPcL96K2+buYLC32MBt1lzo:JDJlZUMewnyN3yD52+bDLCGMBtDk
TLSH
T1EBF523C628C34D71E01BFB75829B7A6CF01E3BA14A669E5F37896D84CF63611843B742
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2810105

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

776B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

788B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hz5

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.K5`

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.E$_

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

452B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

204B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SAKURAA.dll.bin

kernel32

generic