Static task
static1
Behavioral task
behavioral1
Sample
SOA JAN.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SOA JAN.exe
Resource
win10v2004-20221111-en
General
-
Target
SOA JAN.exe
-
Size
798KB
-
MD5
44c2ea6ae2cc120c8c225ff4f49a6f6f
-
SHA1
b14d0e6987c5f389f55e014102cb5b97a41393ee
-
SHA256
f58adc16af76d781317780d00afa4c9b69a4f85f716b2f4968a3b964a1327184
-
SHA512
4128d87b19b89ca843e77f2d0a695afb346eb45b72d5db24b66cf8a5439061b32845980cb44f1ab4354ebd67d06fe801108fbc95b9676750c353caa024dd8812
-
SSDEEP
24576:1GrjseHKNTn7tunA+/kS2lMfmBm8rGtsAEVLNiLM04nAQ:1qOxAEVLNiLx4n
Malware Config
Signatures
Files
-
SOA JAN.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 795KB - Virtual size: 795KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ