SOA pdf[.]img | Triage

Sharing

General

Target

SOA pdf.img
Size

1.2MB
MD5

3f624d66d034cc0b47e1cc90f620293e
SHA1

6dd1e425054ab1471676cee7860288cae2248507
SHA256

a36f044f83511535a62d1187b10d5c92bf557cd07bf85f36519330c04712bb66
SHA512

3c864ba53a9a4eb5664fdf0caf08698d2763688fb66864f5187d7f88f1633a8f4122f209c3ac043553d2c2e1325b6cc1f6d9e7a3b60960a8fe0ba506fa203a89
SSDEEP

12288:tsxTA6q+YIItbIqt8qedaQ5ZmAhXRwIY2NKJGCkui1iDjUqO24XhvMsK6Ed3:yxs66btEM8d42Y+6/kKjGhEsgd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VF8LYKLS.EXE

Files

SOA pdf.img
.iso
VF8LYKLS.EXE
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ