Static task
static1
Behavioral task
behavioral1
Sample
Ödenen Faturalar_pdf.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Ödenen Faturalar_pdf.exe
Resource
win10v2004-20231127-en
General
-
Target
Ödenen Faturalar_pdf.exe
-
Size
343KB
-
MD5
a314f22d19163ad66481e97007d1b078
-
SHA1
4ffabae0f673f4d020e02ba77557fda518549345
-
SHA256
0f8733a1ea0d51fb40e382a7de06088c3fbb02df775d8f38332f72d42b7da062
-
SHA512
12c4428cebd80edb2ecc26ef8176626d33062cd4bcfcddbebd10422b8e5685596ad9618f7fface8b454b6f88bc0e03b26495bea953fc2475d4234f0b8c081165
-
SSDEEP
6144:mEfH/hHZFQxXHIxiUyP+8FBTV0Bg7CKKvLyTzfkZi8MecAR9ukaB2n:mEfH/lZY7L2Bg+KKDmzecAPukaB2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Ödenen Faturalar_pdf.exe
Files
-
Ödenen Faturalar_pdf.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 341KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ