FOTOĞRAF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FOTOĞRAF.exe
Size

901KB
MD5

cb65afcf6601aa7568335d2c2347cb7e
SHA1

ab021596709ba2f4a13f0b33058bd90d86ac4d71
SHA256

826f8d872d3e15552eb033cb00299db7e7168bfaad710bb240b1cb2729b84d59
SHA512

a5b03464fc5b3708b66c3fc73cdfd9cc5c45ab5fa2000463e21922196d51e7656e9c6e251bf2fda74c34cfa24319eae2e23df88f588a88d53d40e0bec0f4de20
SSDEEP

12288:hgC6DC4R12Lo8kG8LXT/XnD/k4NRI6UkCBO2ipNYytes:wF128L/Yd675t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FOTOĞRAF.exe

Files

FOTOĞRAF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 609KB - Virtual size: 609KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ