cf25ee5da2586c24cbd5fe5744efffbb464a8d06d3ee0b355e1baec6b76a467e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf25ee5da2586c24cbd5fe5744efffbb464a8d06d3ee0b355e1baec6b76a467e
Size

456KB
MD5

2a6c560e32f6c8d33d1ae12d71eeda22
SHA1

26ee56a7461f186d1bc2f8e2e61e71db4ca597c3
SHA256

cf25ee5da2586c24cbd5fe5744efffbb464a8d06d3ee0b355e1baec6b76a467e
SHA512

487b6b30d2b687f3b04d137b5a703e79f1f98e487d38d263ee59690670e2b2dbd172d3a45cdc25a43fbcac3e05f3e38d2f5c6cdd20c9fd8e66d113626b02e8d3
SSDEEP

12288:f6WpUNjgnk7OCw5xmrFuqUtdNce6+lBnqI:zpUN0nOw5xa4qUbNVtT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SİPARİŞ_231113-143038.pdf.exe

Files

cf25ee5da2586c24cbd5fe5744efffbb464a8d06d3ee0b355e1baec6b76a467e
.zip
SİPARİŞ_231113-143038.pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ