SOA[.]exe | Triage

Sharing

General

Target

SOA.exe
Size

810KB
MD5

e1666e6dc5b74fede5b52d19b6ed5eb3
SHA1

4629695826687cf1aaedbd0de805ee672ca28b78
SHA256

a4ed69b3f398c38bef69c796dd57f40b6d110fce97d84802b9a2e6b77d07c93f
SHA512

32f34f4c373397eacb0f413d3c8121aa54cdaacde1c73adbd780d0d5cc3ed6c63c03a9639ccea98c5348010e08f11bbf8fe1f434f95663b6abccdc793a9899b8
SSDEEP

12288:X2cxVYgO6MavWMO6MavWmn+Au5SjIoya5EyCdoPIeSq8057HuJ5dx:X2cHO6MavWMO6MavWOlOvF6LR5zY5dx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA.exe

Files

SOA.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 803KB - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ