Hesap[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hesap.exe
Size

714KB
MD5

627ad831b90f29e02b003018b1eee07c
SHA1

9c0034aa327d1a39b36c5773e593f0d6f351a231
SHA256

198c38a216309f3e974f7e5b9bde336e8d77b9716cff0d8d55f1d324ad303a0f
SHA512

84783a6541d9a75a1c4b30bc6a049252f72ccf6f3dfa12919d7d4ddf1b0a33b48f129b71ac4aaf2fe860a8f9bb385446c79bab9f16857e380ccc302ed2956768
SSDEEP

12288:ncO4Ackj+SoXBDJ2VicJjIpr95q32hE/dx20wHM1k4aqROePlor4hAFFI0z:kkiSoXZJ2TjsrfAwEzwHQaaOOlXAFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hesap.exe

Files

Hesap.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 693KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ