Static task
static1
Behavioral task
behavioral1
Sample
Gecikmiş ödeme.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Gecikmiş ödeme.exe
Resource
win10-20230703-en
Behavioral task
behavioral3
Sample
Gecikmiş ödeme.exe
Resource
win10v2004-20230703-en
General
-
Target
virus.zip
-
Size
1.4MB
-
MD5
5f0e573052a34ed2a2737d0113f28bc6
-
SHA1
04394439f86fbf2e230bb2704d82ab5ecc586ccf
-
SHA256
5fab33215694151fe10a674c577eb9aa7e72ef36a8f5af4d1a0bd5f93df8c4ac
-
SHA512
f7a5d2fc3b0f07f5b2f4df975224d637807bc1843a59f631f43357299dbcf5adada6aee1391dee483ccf84838918968ba358770af3bfe57cf3c19fe1899a9581
-
SSDEEP
24576:mLX5Vvg4TC0AU28VH7KlU19Fr4sGbEbmnktksh5BSgs1SQRI:u3vg4e0o8KlUtIQbmkGsHUfRI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Gecikmiş ödeme.exe
Files
-
virus.zip.zip
Password: infected
-
Gecikmiş ödeme.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 864KB - Virtual size: 863KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ