PortMetallKftSipariiPO290[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PortMetallKftSipariiPO290.exe
Size

567KB
MD5

66d0453b37b9b3cfadde152ecad55d36
SHA1

1db6279d5c9b66d2dcbecc2a73a4718f6e87e178
SHA256

827c98452dd95a7456fac5c5fc472c56f436e02b8dcbf4b4ad4c5fc34ffebbdc
SHA512

fc7596358fc4368f9a91bd7fa0d8d3072944240c1c4e557c7d6d1ca27f8240810b36183e5365309614971a1c6b5b76d94e536905ccbd2aece97b3d259cb54e7f
SSDEEP

3072:mFmPtd2epEFbMkbNZG46Xz3kFE0bFd+m0de2fcRMBLEFx11Hiv2MN+Rh3tC0zMni:umBjkbNNhNHG+96+P3tCJnWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PortMetallKftSipariiPO290.exe

Files

PortMetallKftSipariiPO290.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 498KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ