SOA OEC Freight Korea[.]exe | Triage

Sharing

General

Target

SOA OEC Freight Korea.exe
Size

613KB
MD5

f878c9cbe2b0447a108032df274e7f74
SHA1

a25d519a8093591bd3a953b7bc0d39864723c893
SHA256

2d6e0405a2a3b73566f01d21c9747d6a09e65a0b093f980d915d3cb3f1ff89b3
SHA512

cf8d4e3968dab7d18401f098f88fabbaee338b52ab118f305d585a6b0892716632770d5f2bc94226baf5706266e23c6c593c08bada12491439cc0b5eb5363b09
SSDEEP

12288:zmAY2kcdbL4Ef70MESJNvl4UDrCnxFKp4GCp2NFkHh/pf/qKko4MmVNso:yN6GEf70MEqhiyyxtmKmoFmVNso

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA OEC Freight Korea.exe

Files

SOA OEC Freight Korea.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 607KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ