saiko[.]exe | Triage™

Resubmissions

24/10/2026, 00:04

261024-ac2gjs1wfx7

23/10/2026, 23:47

261023-3s2rgaew9s7

Sharing

Copy URL Twitter E-mail

General

Target
saiko.exe
Size 12.3MB
Sample261024-ac2gjs1wfx
SHA256 440531c9fcd0fcc10877fb261f68ad7a55011074454ddb1c71cf3b229338454f
MD5 d6413fa50f354e4ec4872777d20073a2
SHA1 1474e6745d2190d555941c6bc6ed2a37799105d9
SHA512 5fce9e9af0c5ce52e60bb09d3dd1d56b3e614caf15df37f6151d0b076f32afc4298ce18332a1ea4ef4174df253bece12e8010618d1f9f04c4d820a1d5191dc89
SSDEEP 196608:SVYFdOjqirel6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeUS1RPRmv5:S6Srel2YEm6y4lsjg4+f/h42jBS1fmv5
TLSH
T1ADD6CF03F25190B8C05EC3B5875F9632EA72B88D052471BA57F86B212F7BE106B2D79D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
saiko.exe

File Explorer

saiko.exe

.exe 12.3MB

saiko.exe

IMPHASH 987bff3cc8599daccdbf8933831c59e6
SHA256 440531c9fcd0fcc10877fb261f68ad7a55011074454ddb1c71cf3b229338454f
MD5 d6413fa50f354e4ec4872777d20073a2
SHA1 1474e6745d2190d555941c6bc6ed2a37799105d9
SHA512 5fce9e9af0c5ce52e60bb09d3dd1d56b3e614caf15df37f6151d0b076f32afc4298ce18332a1ea4ef4174df253bece12e8010618d1f9f04c4d820a1d5191dc89
SSDEEP 196608:SVYFdOjqirel6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeUS1RPRmv5:S6Srel2YEm6y4lsjg4+f/h42jBS1fmv5
TLSH
T1ADD6CF03F25190B8C05EC3B5875F9632EA72B88D052471BA57F86B212F7BE106B2D79D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fd:67:f0:53:23:b0:cd:e2:f5:3f:4d:86:26:f3:3a:1e:04:e5:1e:39:a3:89:26:74:d7:01:31:97:ae:8c:6e:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

RegCreateKeyExW SystemFunction036 RegCloseKey RegDeleteTreeW RegDeleteValueW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

bcrypt

BCryptGenRandom

crypt32

CryptProtectData CryptUnprotectData

kernel32

AddVectoredExceptionHandler AssignProcessToJobObject CreateFileMappingA CreateJobObjectW CreateToolhelp32Snapshot FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW K32EmptyWorkingSet K32GetProcessMemoryInfo Module32FirstW Module32NextW Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency RtlCaptureContext RtlVirtualUnwind SetEnvironmentVariableW SetInformationJobObject SetUnhandledExceptionFilter CloseHandle GetLastError GetModuleHandleA GetProcAddress Sleep CompareStringOrdinal DuplicateHandle ExitProcess FormatMessageW FreeLibrary GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeProcess GetExitCodeThread GetModuleFileNameW GetModuleHandleW GetProcessHeap GetProcessId GetProcessTimes GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetUserDefaultUILanguage GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete LCIDToLocaleName LoadLibraryA LoadLibraryExA LoadLibraryW LocalFree MapViewOfFile MultiByteToWideChar OpenProcess QueryFullProcessImageNameW ReleaseMutex RtlLookupFunctionEntry SetHandleInformation SetLastError SetThreadStackGuarantee SetWaitableTimer SleepEx SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualAllocEx VirtualFreeEx WaitForSingleObject WideCharToMultiByte WriteProcessMemory lstrlenW AttachConsole CopyFileExW CreateDirectoryW CreateFileW CreateIoCompletionPort CreateMutexW CreateProcessW CreateRemoteThread CreateThread CreateWaitableTimerExW DeleteFileW DeviceIoControl FindClose FindFirstFileExW FindNextFileW FlushFileBuffers GetConsoleMode GetConsoleOutputCP GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetQueuedCompletionStatusEx GetStdHandle GetTempPathW MoveFileExW PostQueuedCompletionStatus ReadConsoleW ReadFileEx RemoveDirectoryW SetFileInformationByHandle SetFilePointerEx SetFileTime SetStdHandle WriteConsoleW WriteFileEx DeleteCriticalSection EnterCriticalSection InitializeCriticalSection LeaveCriticalSection RaiseException RtlUnwindEx VirtualProtect VirtualQuery __C_specific_handler

user32

PrintWindow AdjustWindowRect AdjustWindowRectEx AllowSetForegroundWindow AppendMenuW AttachThreadInput ChangeDisplaySettingsExW ChangeWindowMessageFilterEx CheckMenuItem ClientToScreen ClipCursor CloseTouchInputHandle CreateAcceleratorTableW CreateIcon CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawIconEx DrawMenuBar DrawTextW EnableMenuItem EnableWindow EnumChildWindows EnumDisplayMonitors EnumWindows FillRect FindWindowExW FindWindowW FlashWindowEx GetActiveWindow GetAsyncKeyState GetClassNameW GetClientRect GetClipCursor GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuBarInfo GetMenuItemInfoW GetMessageA GetMessageW GetMonitorInfoW GetParent GetRawInputData GetSystemMenu GetSystemMetrics GetTouchInputInfo GetUpdateRect GetWindow GetWindowDC GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect InvalidateRgn IsIconic IsProcessDPIAware IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadCursorW LoadIconW LoadImageW MapVirtualKeyExW MapVirtualKeyW MapWindowPoints MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MsgWaitForMultipleObjectsEx OffsetRect PeekMessageW PostMessageW PostQuitMessage PostThreadMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterRawInputDevices RegisterTouchWindow RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu ScreenToClient SendInput SendMessageW SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoW SetParent SetPropW SetTimer SetWindowDisplayAffinity SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW ShowCursor ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicodeEx TrackMouseEvent TrackPopupMenu TranslateAcceleratorW TranslateMessage UpdateWindow ValidateRect VkKeyScanW

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

gdi32

BitBlt CombineRgn CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateRectRgn CreateSolidBrush DeleteDC DeleteObject GetDIBits GetDeviceCaps SelectObject SetBkMode SetTextColor

ntdll

RtlNtStatusToDosError NtCancelIoFileEx NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlGetVersion NtCreateNamedPipeFile

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop

oleaut32

GetErrorInfo SetErrorInfo SysFreeString SysStringLen

shell32

DragFinish DragQueryFileW SHAppBarMessage SHCreateItemFromParsingName SHGetKnownFolderPath ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW

shlwapi

SHCreateMemStream

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt shutdown

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr floor pow round roundf trunc

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

_set_app_type __p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp wcslen

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

7.7MB

Virtual Size

7.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

125KB

Virtual Size

125KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

saiko.exe

PE Signature issue

advapi32

bcrypt

crypt32

kernel32

user32

bcryptprimitives

api-ms-win-core-synch-l1-2-0

comctl32

dwmapi

gdi32

ntdll

ole32

oleaut32

shell32

shlwapi

ws2_32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

generic