Static task
static1
Behavioral task
behavioral1
Sample
Siparisi_(PO22738158)_Naturel Su Arıtma.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Siparisi_(PO22738158)_Naturel Su Arıtma.exe
Resource
win10v2004-20220812-en
General
-
Target
Siparisi_(PO22738158)_Naturel Su Arıtma.exe
-
Size
2.5MB
-
MD5
c50d80419e4c55b394596d94c7798940
-
SHA1
4cd5823ed1b1b863beae95321d74d83922d1f882
-
SHA256
1a2a1944e212c814e081a7cdb7f2aaa1146cd544f183ba074f729122bad5a93d
-
SHA512
1843360b6e5c26361083b830a2119d45f41d00c3ec6fda7fb193a029af3c0fdaec87f9aa0722fa92fc54d42346debf1390d53468e522af2b746f0cbd697cb6b7
-
SSDEEP
24576:aRkc2/UfpKexbm2J1mct8SDVtNOU3qCAbg7T/4Wm8HaB3Cgqd1l3ty6N91f2DTZa:CkcwUfpnF6BSXPtLqH85Wjg
Malware Config
Signatures
Files
-
Siparisi_(PO22738158)_Naturel Su Arıtma.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ