SOA FROM UNIBEST[.]img | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOA FROM UNIBEST.img
Size

2.7MB
MD5

8dbba188c3bfd73d2e36fd4836395d7d
SHA1

06399e9b4ce2e542db71949a97aae2cf3903a149
SHA256

918889006cc26f7aeb299decc1fa4c98ecc442289e2148764d79c599c0805aab
SHA512

b30d21e49437e92c165ed484f716acde021a6cf5979078e88f40cf68eec03bfd52b0c3a653e3e4eecc8ef80fec3141ea0638e870431b6b2662ed5637c8b02e28
SSDEEP

24576:4ENE5lhcUEj6ZSKUqEZDiRnv/uPTra9dTR53oQ6Vt3/v05kxHU4/4o+U+uiVrC5+:ELVLAOfqR/M5mT4o+O2yq+K99kdkb1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/SOA FROM UNIBEST.exe

Files

SOA FROM UNIBEST.img
.iso
out.iso
.iso
SOA FROM UNIBEST.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ