Hesap hareketleriniz[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hesap hareketleriniz.exe
Size

464KB
MD5

aea8093989b49b0e7449dfaadafcde4a
SHA1

5a58969c99076116e833d9fbf7177a6f43cb0143
SHA256

079ee1d5bfc9f7b51c26f721c3e43160f01208bfdcd67290b44dd0f53cac5ca0
SHA512

99a244bb04fefdcc5ef48516f232f7af1e2f40d2af9fce9909c6a10d17946878b5bc6dfe705a833d8eaeb9d5e28853b962a6831840f454f04dc97e9f20eecd5f
SSDEEP

6144:IyfzmAYjgzGSk2mcdbLAlREZlDxyFk9fxguWdZ5LejtHohxiAHwVY391d7dpwL:/7mAY2kcdbL4EfMFGwZepHoe8nW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hesap hareketleriniz.exe

Files

Hesap hareketleriniz.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ