satın alma emri[.]exe | Triage

Sharing

General

Target

satın alma emri.exe
Size

456KB
MD5

2c0f7daa0637923f321617d6bbc2c968
SHA1

da5f7fca6da24d2f065d68bc32a127089b7c42ed
SHA256

67a1d95ac501b3239795c12bdebe20853519e92810d5124bff570a5f9001d440
SHA512

89098cf7e98ad22b56ce7415db68a26afa1f3bd48c3611def7edb08242045140dd14de94e464840e36d7efb1ad5d3f72970120dd0d1e607359e2d6a0db6be3c7
SSDEEP

6144:z3IaL+ZdLqbt3de/e1L0U0iA3o4U5miBdthFjPLW5eVHtM3RirSdkbrs1aq:z9/p1gUVA3KxjzKeVHyRir5rs1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
satın alma emri.exe

Files

satın alma emri.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 453KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ