e-Belge1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e-Belge1.exe
Size

1.3MB
MD5

a15768f65b51697593933bce26865c78
SHA1

577e9c868e71523f57fe011f92203815f02d473f
SHA256

4d97061314f112ff5f64d8a7ebd5ddbd8ad6f51f0fe4c104d0db4c9d0ba8de2f
SHA512

c18c16b50c8374645f58f894afa10a2ad9fb3654173956b91dc9677df3ade9230e1afb732a7a6cd301ba56c69a2714716bd3c928eee37be5addbf9e3cf816b95
SSDEEP

24576:jE1l1JzHgF42X9J5LfYQU00G0B6o4D7aTQwve:Y1JrDU9fLf6fG0Bj4KW

Score

N/A

Malware Config

Signatures

Files

e-Belge1.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 999KB - Virtual size: 998KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ