SOA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOA.exe
Size

716KB
MD5

1636b18851fedda62fc549bc5889ef19
SHA1

e576f0391ef4e144d0011e900e3c17b129b44db3
SHA256

1583539750a0978ddd44e880b98312186bb4cb236635201b209c67703e899e8e
SHA512

203f841a63ffd2be21acba1a55e5c06e581b572bad7da8218bd0f268fbef3808337c02d3af736b69386edc50b895f099cc739c92ed6c6cb12b1e2aebc3bbe0ef
SSDEEP

12288:skntufJw1Uy/jz4LnVuQn3+MeMUpQyqiO9ANtmAEhUlTL4O1vXMiN2lfJ:HUBwZH4Jh3pgKHmNtDeGTVMlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA.exe

Files

SOA.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ