ti̇cari̇ fatura0852023[.]exe | Triage

Sharing

General

Target

ti̇cari̇ fatura0852023.exe
Size

517KB
MD5

e1d7bb065d0af85e5053a1109b8ee034
SHA1

a1fa795b7f358176dee67fc0f8cb8416742b8d8a
SHA256

dfb1e4b77bceb4aa51ca6e7f79785f573cdfa9d047bf38717926730be7f85026
SHA512

ee8a53cba43654b07c7d03164e216c2692447d1741c9eebb932ec2c134a0ff687bc205741fcd5ecb2d9b341a2e11ec61e19805bf072967c3d8a9de4ac6483775
SSDEEP

12288:8wQ/6u4T/uDZ1D425kqtSCwqEXm3FvAdTJ:89T4T/W1c2WqUX23FvA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ti̇cari̇ fatura0852023.exe

Files

ti̇cari̇ fatura0852023.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ