Hesaphareketi-01[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hesaphareketi-01.exe
Size

653KB
MD5

a1a668546a2ffdf5bda84b2c49e16da0
SHA1

776a95dc7299bad8c7df0a9474f576be14846a43
SHA256

ca288fc2138adc209bc41a8ca6500cd3fdcf58cdfc73526cc8c06cd9f113c560
SHA512

dffc172be502b036716af87a0ce62b667a23e89aa7fd88903b3e79a329a342bc32a33ad85877cc5883788063842ae975f69390961f9d45e5c5cd3d873b3d5154
SSDEEP

12288:BAfDuHOXptz8ZgGTOJv7RMPfMpt75lL5P7jqYACHwjUOlj:BgTtz8gJ3Vrr8U2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hesaphareketi-01.exe

Files

Hesaphareketi-01.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 553KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ