Static task
static1
Behavioral task
behavioral1
Sample
Yeni sipariş.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Yeni sipariş.exe
Resource
win10v2004-20230915-en
General
-
Target
Yeni sipariş.exe
-
Size
950KB
-
MD5
e0c63afdc2fcacf05bcb2a19872bff8e
-
SHA1
e4c79619483a6014f4d77dba5b184df4a0980167
-
SHA256
d0d8504d8c8baf1973ff40d76e05d7813366afb905be56e9f69184e35da9f58e
-
SHA512
22d1774c45b484c837e0f04fc8d737c2b6c4b43ff99b60dc74c7726140f90e365e2397ca289e1d35abfe791fc6e4b17ac4ddbd34599d145d7c7fb862352d7bc7
-
SSDEEP
12288:gtHDzrD6JJsllwhi+XxmJCS7u/pJhgI+7MZKgoQlZag:cD0clwhi+1/pn+7gKgoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Yeni sipariş.exe
Files
-
Yeni sipariş.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ