Static task
static1
Behavioral task
behavioral1
Sample
Yenisiparislistesiektedir.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Yenisiparislistesiektedir.exe
Resource
win10v2004-20230220-en
General
-
Target
Yenisiparislistesiektedir.exe
-
Size
698KB
-
MD5
a88d4ca6c585533d1eb2b574c3ba3183
-
SHA1
61f5c84f50a49cc5c8e3e4a643e67b60a6ab83fd
-
SHA256
1170e879b605319f3c4cec1d0a5a28746fc98f1131bbc73b596f3ac67cb2caeb
-
SHA512
25c55f5219cd80982fab56199e35cdb21fa0ff11e22bcd9371f5b9b29b447f731d752f5d75e1a77f83f15f418dede1db9a10cadf0db268eb178cada3e8da4bcf
-
SSDEEP
12288:56gWC6YN1Pc+70pKXQlIj5g15rK7shNYW9348L0DHz8u3CqVvwb17F/dgVT4/mu:Z5g1rTB48LaAvqVYb1weu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Yenisiparislistesiektedir.exe
Files
-
Yenisiparislistesiektedir.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 688KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ