Static task
static1
Behavioral task
behavioral1
Sample
Ödeme Onay Fişi.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Ödeme Onay Fişi.exe
Resource
win10v2004-20230915-en
General
-
Target
Ödeme Onay Fişi.exe
-
Size
943KB
-
MD5
c08cb88535a333e1397cbb57e7a24201
-
SHA1
7f3cfd93b690c4693001b8ff74bdce3e7b794ff7
-
SHA256
b2e927c33beb8e5f1b48f7f2accc05ab7d96baf812a53299e950aa96e98cd109
-
SHA512
21b8b9896c3ca8cd0ea679d10bf3de9c524e4bbcb4df3819c8d7529407526ffb4d7997f7ba13269b5114dd312e5f3cf0050d1ec29497efb84a96ca95930870f0
-
SSDEEP
12288:42iNNEisUH/tXwk7CVu7I2XZHQXFJODhNgq2QBQQjqQkMO9LrnwI+:41XEWeaCMU2lQ1YhNgqoKob9Lrw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ödeme Onay Fişi.exe
Files
-
Ödeme Onay Fişi.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 651KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ