EPDA & SOA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EPDA & SOA.exe
Size

762KB
MD5

c3c87aa9bcc17d6638b54ead59dc976c
SHA1

ba2ac5353d931fce5b2c902ce712cdcaa30b0be3
SHA256

1136a7337b15d84cb01ce91fe74e0be8a7e1df783243cb8c38feb070aba7c54e
SHA512

f613d232a8672a32e9676d34c686625989579089e77fa9e74b2df2d0954f0a811a776bd244824661883a1b83ed2060f9d0864a353d281d10e5e96870fda34586
SSDEEP

12288:3z11KBGOjtWCeoCkEKNahF7jHtMTNCHXVTue5mQACBQwIZD+:jPKRjYtoZeDtWyTOQAGjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EPDA & SOA.exe

Files

EPDA & SOA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ