Static task
static1
Behavioral task
behavioral1
Sample
ÖDEME KOPYASI.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ÖDEME KOPYASI.exe
Resource
win10v2004-20230915-en
General
-
Target
ÖDEME KOPYASI.exe
-
Size
999KB
-
MD5
5fe9735d23575f10a9d896edbcdd06cd
-
SHA1
e3b30164ee17927f4bde8c5860542fc8160c51fd
-
SHA256
88d9bc2a3b864ddf5b1e1763a9f3489be3f6d1480bcc4be9dd9d7d688d59af77
-
SHA512
9511459e51f5988e4bceb29bf8e155056334e9ac503eee30c1bef7ce467a7f8eee7db537e7dee1ab947b617576195152e58e800aa4931ae4c76ff785288c4e3e
-
SSDEEP
12288:jPGEfJw1Ugcsl//sUkS0B1q72G9ElJrp8wP64cqFAapSSTedL0J2:FBwysl/dkBTq72G9ETp8ZdkXp7g0U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ÖDEME KOPYASI.exe
Files
-
ÖDEME KOPYASI.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 706KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ