Static task
static1
Behavioral task
behavioral1
Sample
İHRACAT BELGELERİ.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
İHRACAT BELGELERİ.exe
Resource
win10v2004-20230703-en
General
-
Target
İHRACAT BELGELERİ.exe
-
Size
769KB
-
MD5
ab8cb2fc431b1206c1e4428af1488e88
-
SHA1
61dd8385af2655b179438e67c95a7ca070a3e127
-
SHA256
d9eefd6741e692541008b7d71cde7d92662a6088247791f8a48e41b953324196
-
SHA512
467a3e28418d1aa4ab6286afd933b2da6a22056382ccd23d84d7f217d968b4c56045061cc9980f92ef205c041eaac582c231282287c5f50566e758d930466dcd
-
SSDEEP
6144:0WvPb4upXWXxsmh60Q3k8BPk7zVs4+3CVURJfenvQN+sOuJAvAc4kmGxW0pmNHm9:0qpXWH0PTezVs4nznq+YoAcAMuGTuhE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource İHRACAT BELGELERİ.exe
Files
-
İHRACAT BELGELERİ.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 477KB - Virtual size: 477KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ