Static task
static1
Behavioral task
behavioral1
Sample
SOA..exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SOA..exe
Resource
win10v2004-20230220-en
General
-
Target
SOA.zip
-
Size
688KB
-
MD5
6fb4457677493adb9b3cdc49f5d5769a
-
SHA1
cfa6ac2f54c2c4bae55733241732ae0e924f25fe
-
SHA256
f0d37856426530f2658e81c1fc07465e09830d1be989079be04a774300658857
-
SHA512
f12ab1151301cfc07137eba6c1b670ea30d4e30c9b4870b6ae29f2d857998c996de368283e883beab9aa6a022e08a3431ff2c1953efdd1c9a9b0c22191bd8602
-
SSDEEP
12288:1+BNReJN0B5qLExHN8qP9jJHavgNe/v7P4KeoQt+WhCyoDZ1kXN19KFm/bki:ESi5qLExHWC76INe/vcKzC+WhCyuYX9b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SOA..exe
Files
-
SOA.zip.zip
-
SOA..exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 805KB - Virtual size: 805KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ