Static task
static1
Behavioral task
behavioral1
Sample
Yaklaşan ödeme.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Yaklaşan ödeme.exe
Resource
win10v2004-20220812-en
General
-
Target
392e7dfcfa22db14be30dde9415c10dbb6695ad89060926afbb052c0a3ae8901
-
Size
12KB
-
MD5
accf9d973bdc5300e2c006193d083f6f
-
SHA1
38b7625f7e261406ef14570b33e89b3bf7e9b7c6
-
SHA256
392e7dfcfa22db14be30dde9415c10dbb6695ad89060926afbb052c0a3ae8901
-
SHA512
712b192f34fb09d297350ed86d430ad49dfe36ef2cf21857c11693b0fea7ccc957b159f83b4a33766ddb61dd1dff535e6e9091763c0d1f95d2938b52edbce95a
-
SSDEEP
192:hKmKvHgbNUEV6TRMZNl0S8QvA+ehYpy0MshneDRPsyHNNbcmHCxqzM/V+je1N:QUb2EEowyxpXeDRPsQbzixqQ/Oe1N
Malware Config
Signatures
Files
-
392e7dfcfa22db14be30dde9415c10dbb6695ad89060926afbb052c0a3ae8901.gz
-
sample.tar
-
Yaklaşan ödeme.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ