Static task
static1
Behavioral task
behavioral1
Sample
faturalar.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
faturalar.exe
Resource
win10v2004-20220812-en
General
-
Target
8212336315.zip
-
Size
743KB
-
MD5
bfb54e042f34393eabf1d4e1f02ddbe5
-
SHA1
5560174cd160b27aca42131ba3c38bb514778c8d
-
SHA256
53f71b59d1e6a28ad88d09b068dc85f75fdd4d642804ff976f559ad8809e0e6b
-
SHA512
6a08b134c53f7d288d78c7e7b4754807552643438c206a6ba14e705efdd05b7c5114ebd50ae4d467eb5700e08fb7ff175e3929966d5f37b4f49229e0dee368eb
-
SSDEEP
12288:3jJPgu6ibnNL3stpc7v9toLsaxw1EhyZ2CMnww4Ok3I7v/v0P8YQir8g3YnhiHJT:3ywDp3epcr9tGjxcEg2P4ODTkJ6hiHJT
Malware Config
Signatures
Files
-
8212336315.zip.zip
Password: infected
-
123346065e773c509cdd2f2102a487a6c86b45437145089e91d6e61d80e11a3e.rar
-
faturalar.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 932KB - Virtual size: 931KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ