FOTOĞRAF[.]exe | Triage

Sharing

General

Target

FOTOĞRAF.exe
Size

888KB
MD5

ba0f23aa57be5e8fd831b3f9a2fa047f
SHA1

18189517db2bdf46a052eb9b6ea152d043f071b0
SHA256

aa2d0f4b6445d3f0f50a54a10d357abf7a51cf14cb63ab99f357ea3564f84e7c
SHA512

cc56b81a71800feda54e461ae866298bbdac5555b146e8af4130b47245fde444b61228f2845a59d2a9882eefedd7f029c84583ed436d7b86f019c36ce2c731dc
SSDEEP

12288:KBqD3ZxjJE8ERFtwuunWn1X4oAP1MWv8rqQKZemxy8dN9YIG:KoLZxj6XFti64oANwSeay8d0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FOTOĞRAF.exe

Files

FOTOĞRAF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 595KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ