Soa[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Soa.img
Size

1.2MB
MD5

e907bdefdf9098a9f1b473a3e2e55633
SHA1

482311e7da4b4d6549312467aa02da5116acce6b
SHA256

7d5f2db3ab23b9d7e49c141add2e501a13c886ad422d1cf46f2c955cb0a3f400
SHA512

e2a98fc1c008c2df1d5d212e17632553b9318cf669f11ccb76b641f51005d295a9ed07ad9f681845639d0103afa4b18d52c37b93ff5b827942b08537fca0d469
SSDEEP

12288:554lrrOdf21dnWRvCsQ2/aSqAo3WMov9c0gHiQbW8KqIZgrhVsAty857q4f8:554lX++D4LiSqdE+HiQyoIULsA95m4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DIEWWZND.EXE

Files

Soa.img
.iso
DIEWWZND.EXE
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ