SOA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SOA.exe
Size

692KB
MD5

41bedd3f85826bacab8c41a5d60d95d9
SHA1

a5389361c575db744ba2beb4de271dc0c771f9bd
SHA256

6edb919ae98a2e2efa4af69125a5245793ccb79a8a74e12bc6d51d8c87ac76b1
SHA512

6d0975b716bfbe8f61abfe8c9707a96b627ea7e03c87f1fd9aa946e31a7de32847d6e5698c628a6b0a55db892ce5f29f14ed078fc497675d060970f336f4e6f7
SSDEEP

12288:62iNzeWFm++w+mlVxbxW75ksEI0MhBiBhIYad4qmDgqMg6aBS9FKaJR:61tRFm++wjVx47SsGqoB1VDgql6emKaJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SOA.exe

Files

SOA.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

gbaZ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ