Static task
static1
Behavioral task
behavioral1
Sample
Yeni SipariÅŸ_22.08.0234.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Yeni SipariÅŸ_22.08.0234.exe
Resource
win10v2004-20230703-en
General
-
Target
Yeni SipariÅŸ_22.08.0234.exe
-
Size
706KB
-
MD5
c0d867152678c70b2270d6df488ecead
-
SHA1
6c7d0acd5933d2edceac81e0f8619139b23e3500
-
SHA256
08a840677baaa0b14152850e1e0923aaa819ae8a2ecd7923f9510e1141962f16
-
SHA512
0f5bb9714b72c95974d6090c3be796a259ae6acdf2767d63774160dcd46651f37819d1356f19f97561fda3daf166b9da4f5bbdb4b4540c5b12c5e7c7ae29b643
-
SSDEEP
12288:8xffDCbcfI2TNUAJy2LIaNe83W7gBgRhxO+01xJ5H0ItESa:8tfDCbcN+AJ6+pW74ga1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Yeni SipariÅŸ_22.08.0234.exe
Files
-
Yeni SipariÅŸ_22.08.0234.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 549KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ