SOA[.]rar(1)[.]pellet | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOA.rar(1).pellet
Size

658KB
MD5

095be36262a033a6d3108e6b3898ef9c
SHA1

470663d87ecce5e312dc22d6d26fd1581f76bf5e
SHA256

feaee255a3fb7cf316c22e0899e32e6f30dcee2558c1999809dc4312d047f14d
SHA512

ecbf38d018e4825972d26c321c5eed117799ee211ada04044706c41039774ec37f14a85c7778604830c60a743370dc67331454ab41a098fb9f354d9a21f892e4
SSDEEP

12288:C/+Axw9Q1ijO6ZEkXrZvocIO82wodpA5/CxvarUXkETniba:TAZ1v6FZgkzvSsTiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SOA.exe

Files

SOA.rar(1).pellet
.rar
SOA.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ