Sipariş Formu - SP1020-2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sipariş Formu - SP1020-2.exe
Size

1.0MB
MD5

2f2168e1086266ef3ebd6e5a151ea9e8
SHA1

8d48b8bfa040b8bda9da72c7b35e63aa62a5af8b
SHA256

8f16bf4456359f103fc596a68b0a875a89f83e81798e8fa2e619adb2b4b13dff
SHA512

89f5f5efc2a9dafd782f0565609fd9e3bb89ef8196fdc458b21b4b0401607d02f62b3bf2beadb8b005a227271c2a08c0a42499a9cb9f5816e75750285298f466
SSDEEP

24576:/Ti1FVNyK8FmyGLEDezf82HpfjtY2WCU:/TijVNyK8RAf8WxpY2Wx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sipariş Formu - SP1020-2.exe

Files

Sipariş Formu - SP1020-2.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 748KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ