SOA[.]zip | Triage

Sharing

General

Target

SOA.zip
Size

452KB
MD5

db440bf93422632e4b68357488beec8f
SHA1

d0238fa05b550c460ea187acfebf252630cbe9bc
SHA256

27f0108dffaf853ead64f1372712383f02a98f8bf075ffa311eb4ee51a4608c3
SHA512

829adafa4da2074025a016724063e31dd258aa1e1d5405cd63348782e54eba66f024a85a6b716f59613a2f07936fb3fc8446283e84e68e58f419c75f971109e4
SSDEEP

12288:1lyZwKvZwJ3FSvjSbysp78Md8ALfOH7JHUJ03fdKpr:uZZwow7p75LgJHUe3qr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SOA.exe

Files

SOA.zip
.zip
SOA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 779KB - Virtual size: 779KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ