Türkiye İş_Bankası_Ödeme[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Türkiye İş_Bankası_Ödeme.exe
Size

101KB
MD5

2ce3396c5cf320b0c0d70ab1d5631eab
SHA1

4e5660535bdc9256dea65a54fdddcfff80d88792
SHA256

cf0dd63651cf5fa24b8b70384acd86edeb4c0eb3b47ca7684d817a76eb55eeca
SHA512

23950b608d0b53458d0323bb371d1ddb6b661b5ae5abe8f3a9d637665f6d3ff4bd91273cca6bf4a141505759ac5e582e4e08e6a2f30fba8026887c409a7e340e
SSDEEP

768:kHqQSRmST294dWa2P7b1IzPrXMkN336DXS:NQSD294dN2PmfMkN3KDi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Türkiye İş_Bankası_Ödeme.exe

Files

Türkiye İş_Bankası_Ödeme.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ