FOTOĞRAF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FOTOĞRAF.exe
Size

976KB
MD5

f51828bc02015919cdbad9c46c36bbef
SHA1

224ffc9efd42fb374889dbcef02cad8f76d02b45
SHA256

e5fe74a699fdee524980b0ccdfe82a6a98abd5c011ba909822455b831720b686
SHA512

6695ee3bb82942db9aa627467bf3fb5c9dc1175128fbee92e9104c4e2c979b5555f962e185aa168d306d89d08d137b5484ca7ca8e2352e29efa1d47b195844ce
SSDEEP

12288:iJ4aSp7tL+NZ4ZJVJH1qfGK2tWuIyafbx44dkGNs0BYhhfsqZRQ5:Rp5i4ZJfH4juIfN4WkGNs0Chh0qZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FOTOĞRAF.exe

Files

FOTOĞRAF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ