r__r__n_Fiyat10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

r__r__n_Fiyat10.exe
Size

174KB
MD5

3464bcd74bb3d91156f7e5485bb0caa9
SHA1

e20fea554538ce9ed1856d037d4322a7eb1d4c8f
SHA256

e7381cc97a46b747466b313387a75b99c21aac2ee4d0405323d97dc364bd4202
SHA512

660af6200e4d459369f5cc4886a29a85dfdb6d102a7a23239b97debbbb87d2ad060f517a049ee142456ef33d4478d5612bd2b404d4446a8a8e2a3f55326fcebf
SSDEEP

1536:70AY1c9wqvnAv77vvvvv7vvvvvvv7vvvvv64+mhhhm+DtqOgv:7c+9wqY+mhhhmitqOI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r__r__n_Fiyat10.exe

Files

r__r__n_Fiyat10.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

6-TH>Q
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ