Static task
static1
Behavioral task
behavioral1
Sample
borç senedi.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
borç senedi.exe
Resource
win10v2004-20220812-en
General
-
Target
3c143f2a7787a25a09d9906ef23db110
-
Size
2.1MB
-
MD5
3c143f2a7787a25a09d9906ef23db110
-
SHA1
81be93eed407e8606b0daaa0ddb6052d0b0c6a37
-
SHA256
e323e567884cf361e5f0d24946978c80ce81cc95a23d1b5a8c837953f5caa344
-
SHA512
9a84a4c1b0e4eab1ccbc776a2971687d374c86e54cb4e65f18de0111eda51cf1af9c9c3b286973b4b1df161e58ae017c78992a53bad39255e834b6d7aa9d2210
-
SSDEEP
24576:jAvECFTUlI0gckQVOqUai3NPOM+MHHB+edyH8d9uPvquKaCnP1enu+LWO9IG1eG2:oxhUQlfR50Wn0L+4NZnhFxIRZJA2
Malware Config
Signatures
Files
-
3c143f2a7787a25a09d9906ef23db110.eml
-
http://yildizentegre.com/tr/yasal-uyari
-
https://goo.gl/maps/9bvxN6frCXu
-
http://www.google.com/url?q=
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
https://www.google.com/maps/search/NATO+YOLU+CADDES%C4%B0+NO+219%2FB+%C3%9CMRAN%C4%B0YE%2F%C4%B0STANBUL?entry=gmail&source=g
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
http://www.google.com/url?q=http%3A%2F%2Fyildizentegre.com%2Ftr%2Fyasal-uyari&sa=D&sntz=1&usg=AOvVaw3fJxC1Ln2qUGU-hCvUJTde
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
-
http://www.google.com/url?q=http%3A%2F%2Fwww.cerkomotor.com%2F&sa=D&sntz=1&usg=AOvVaw2IF750n4bY36L_KGExKAac
-
https://www.google.com/maps/search/NATO+YOLU+CADDES%C4%B0+NO+219%2FB+%C3%9CMRAN%C4%B0YE%2F%C4%B0STANBUL?entry=gmail&source=g
-
https://mail.google.com/mail/u/1/h/17h3map2dkjyx/?&cs=wh&v=b&[email protected]
- Show all
-
-
borç senedi.r00.rar
-
borç senedi.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 995KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt
-
faturalar.r00.rar