soya crypted[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

soya crypted.exe
Size

527KB
MD5

66a6cd16d3f402326c3d87b18ea286d4
SHA1

cbacca9aa25b34fe95548c1e7873eebc2b4cb662
SHA256

8cd9365e199e3337d7c324fcbf33c0df9729f3c459b42aa6ffb50d2aacf90367
SHA512

0e96b7dae3f431a85e486118ca8e702c5cf10191dccd1449bbcbd6dc3689960bab89b85308ed8cfa7b293700de80884240d67c1ee5131b468bb094dc756af4a7
SSDEEP

12288:1frrB1o4hZe7pcB2QwyPLMjHEr3Aq2c56rMmyf7:1/B1o427pXQwyPLMjK3T2c5gMmyf7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
soya crypted.exe

Files

soya crypted.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ