Static task
static1
Behavioral task
behavioral1
Sample
SATIN ALMA EMRİ.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SATIN ALMA EMRİ.exe
Resource
win10v2004-20230220-en
General
-
Target
31C1FA78299E5E5AAA7114A72E47A9B2FEF24380440F081A62C8D41AF8194A11
-
Size
469KB
-
MD5
302fe4f9b36253a90027c1a5a358c039
-
SHA1
7f69ad7b1042ddebaad9e02652878360f68df876
-
SHA256
31c1fa78299e5e5aaa7114a72e47a9b2fef24380440f081a62c8d41af8194a11
-
SHA512
33e33453863927aff3fea99e87399e155b009b386a3feb06f3da59b121364b1617bee06850c06184713c8797f3acca4662a604d6d7071a2cb6d5be9f67dde96a
-
SSDEEP
6144:6MQSUMqOYrdRDPCU38MDhSSdnlNbA1LV5Z94qxCY98ew7SGSNgkpc+6bdB6lgArA:FaMjYLj7DhSCApOYCYeewyNLc+6n6aAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SATIN ALMA EMRİ.exe
Files
-
31C1FA78299E5E5AAA7114A72E47A9B2FEF24380440F081A62C8D41AF8194A11.rar
-
SATIN ALMA EMRİ.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 523KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ