Static task
static1
Behavioral task
behavioral1
Sample
Hesap hareketleriniz.exe
Resource
win7-20230712-en
General
-
Target
Hesap hareketleriniz.exe
-
Size
25KB
-
MD5
a5e366ff456c4a0cd259f9fb4d435ab9
-
SHA1
8f0a331e1e663f74a98019ae09ee923799101464
-
SHA256
c030774b49428397cadf15f5a7b08e8fcfde4920705b0790b8b83cdcb3456956
-
SHA512
5034375686b6d0cc1efc27710abcdf995015a023557b253338c595bbf252347113a3b85a4c197f6a4cf3315b241401931572ec701b704ab29b2430e1138500c8
-
SSDEEP
768:Eed8Wp1i+NIOe+PD7U6jtiyqAqA/dnGzG8:Eg8Wp1iTOT7+yLqKu9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hesap hareketleriniz.exe
Files
-
Hesap hareketleriniz.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ