Satın Alma Sorgulama PDF (1)[.]tgz | Triage

Sharing

General

Target

Satın Alma Sorgulama PDF (1).tgz
Size

777KB
MD5

78c3556ad9f0efb8cbf598f968d3e892
SHA1

4c5cf383eae0a035e6edb23be2078b4fc9f956a1
SHA256

515090feda9b4dd48ba138d32e1deee6c229cbfe7dd75671b92cdcf1549fcc28
SHA512

26aea4a66f58b7f1260177cf948805e3dd4bd29c84d37af7334a4a71fb4a9220e1049d6718686514db945ed30dc21a54386674e70581a5e253ba968861b04299
SSDEEP

3072:rCDybAeyVNydGMlkaq7ncF7ta9IkX+VBF7n+JZE:rmyb2koMM7cJtAIxBF7n+DE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Xmmup.exe

Files

Satın Alma Sorgulama PDF (1).tgz
.gz
sample
.tar
Xmmup.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ