SOA[.]exe | Triage

Sharing

General

Target

SOA.exe
Size

1.1MB
MD5

43cfd73531dd9f120df6e29fd5f4275a
SHA1

2079b4ebf328bf386d7a179b16c099da0cd3dda2
SHA256

8d4ff51f91c2dd8a8b146728ea221df09b5921e359a71557a6d52fa7e8612736
SHA512

f07463203116ebc398726b271407397610caa0a0b9c583570096a71b40c88de5b6243f6c64afb6a1acfbd5625eead393ef515d5128464f98da0ac72a4a516644
SSDEEP

24576:LIYIEqafl1ILKEb+16ma4R1gP/uvbeke3QGbe5IwyMPGQy0G1:ZIENDIe6q6t4jgP/ul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA.exe

Files

SOA.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ