SOA MARCH[.]rar | Triage

Sharing

General

Target

SOA MARCH.rar
Size

639KB
MD5

6a8aaebdc6e0c2f3981f6a376e55cc78
SHA1

99f9605e91ef5ef865a6a5bcb44ae118e84a7de0
SHA256

94017c58cc43fdbe30c3b6037fbb55f11f65762d09f516d6f6ed85aa541ee700
SHA512

af270983bef6f521919a0cade2cba80c6190b1c018e268a791e2a9f40802326f0b3ca2c108ba4b030840d5c741b0e70ec545f70d5bf8d29b9556ea8343043e97
SSDEEP

12288:z6hbNgYR1T31i3rUqBVsVh+9QIQhruTCnnrDeQO4eoeZTBuh6:meYH1i34qBVsr+2IQhrugBreZYh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SOA MARCH.exe

Files

SOA MARCH.rar
.rar
SOA MARCH.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DTVE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 681KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ