Inv[.] & SOA[.]exe | Triage

Sharing

General

Target

Inv. & SOA.exe
Size

881KB
MD5

be042f209b58598fe1e6a1dd0069338f
SHA1

e65ada8af54201b0251f105d56acd200ef1f6adc
SHA256

9618f331b2bbad7bbb947cedaad7dd744169318cb11212e05089c6f4b8983400
SHA512

4016a3f80ede87654c9571d3a070f9d6cfa25a0cc83d8c2fe227f0f18a82c821c0580aa82b844cfb079b69db404a3b3fc3808143b20e8a8f8e6f9f47f65a785e
SSDEEP

12288:0n7hgpSrh2uh87xM2dnn4TktJXCTDW01RYcOrsj0T55C:CmAt2h7lx4TktJXoYcOrs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Inv. & SOA.exe

Files

Inv. & SOA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 878KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ