SOA[.]exe | Triage

Sharing

General

Target

SOA.exe
Size

1.0MB
MD5

216885bd00bd597ac33d9e991f9e164f
SHA1

261e33704dcdc2d51a750f6186943120d99f982a
SHA256

bcc3b49ae655985e603719e39588c754c32a65aefe5a7c38658abb211f18764a
SHA512

1e5101f298579b1ceb419c3b7ad8315fc8c6984ed0d34d840448151cb14b834327e1d79882e149592f63f75706cf02dd3c3f7c63e441588fecd5c86bd93c4403
SSDEEP

12288:stDzBBtnm3n0He9DlpzIpk1qaxbxQxkT4/rJw8flwykcnM9lPuTO47QpilQP/dUC:Kp6um8JtLA66v1WVlWJsi9XRZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA.exe

Files

SOA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ