JAN SOA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

JAN SOA.exe
Size

720KB
MD5

630d06ae7986e9b1a8d1e9472d255113
SHA1

b88c56a54f09dbc64f315d13b83e9592b483f831
SHA256

07a41eff76914977afbfe4bf07f2ef55d2478dd32a439c3979f619679c7a69b3
SHA512

f3d329b138f0ef27bc2f75a6a02b7a77a1b590b185957ede37de0497a2c6a4c1d0ae312a32642e27eccc758fe57ad584011be891fe3ca3c9bfeb07619ef62659
SSDEEP

12288:wIkegET9jsIBMNjnNNOhAe/S0Qm+/cs8z5xYTwwvViPb4oadr1XIHp4u6Sz27Iy8:nTsIBMNjnNNOhAe/S0ZZOvVWb4o81YH2

Score

1^/10

Malware Config

Signatures

Files

JAN SOA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 717KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ