Hızlı[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hızlı.exe
Size

1.2MB
MD5

e3a166dbde0cfb3115296efe4ccee844
SHA1

27e564d1426f8e70e37648fbaafb38c5ca76955b
SHA256

011da00b87e170072309cdd3770646019ec6d8cec56441ab627a535aba8809ba
SHA512

41d2f858025a39eb87009d0d16c9b534cd1515b4b433a80f8f36c6d824bdc5b4d30df15b7dc6e845214672e0c4165f5cda9b9392abc24f0c12af1f6734dc8dc9
SSDEEP

12288:6Frf32iNcLH4XBZt9PgGdwbgszn8E0Ff7zpJnmS7pK4HTN:6pf31JtdgGdYgc8jFzm

Score

N/A

Malware Config

Signatures

Files

Hızlı.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 965KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ