SOA[.]r15[.]rar | Triage

Sharing

General

Target

SOA.r15.rar
Size

672KB
MD5

b76ea85a5569dc289ea3f8c04f680aca
SHA1

a686406a4dc4f592851a8b06b7ab1ff753f71b9b
SHA256

6fc7c0785b156c2762d57331f480739a3d6c4769bb405c7c0770f53a7ff114dd
SHA512

1354e4e9fada8bfa35a776cbcd45064b901bbdcf9673e056c94504a59d6b58274dddf35169ba2127cbb2d719f0832b767255e950a75eafd0ce310ad6cc674963
SSDEEP

12288:vPSlAoJSQ9H6N8wFG/sggCrQcOqxL/gzpwdkGxwhZfkS0W+p:nmAAlEbk/sDCr8qxL/g2C6cxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SOA.exe

Files

SOA.r15.rar
.rar
SOA.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 641KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ