IhsanSigortaKurulum[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

IhsanSigortaKurulum.exe
Size

2.8MB
MD5

f0fe24b26140d289c07d2bf366c911db
SHA1

db393ef2396f7eb6ff13983a4c013a0d47148a9d
SHA256

b34fc88271dbc00615cdb731818052477c4e8c100aade0ef153dd02c7a1fa43e
SHA512

0f1d5d7c2fb8355855d45a480a2e5e6c72f5e488467cd038afe6897abc8c8b7c1eeab6d824ddd1f2ea9b01c134570efc050a0f33ba7a973445cae66a0c3a8a05
SSDEEP

49152:Q/nlTytTyFpw+zy58PpB+MsKc4ORKjavjaXTRPR4MblCTyU:Q1ylyFpLjuMdORlv4Vdbl2yU

Score

1^/10

Malware Config

Signatures

Files

IhsanSigortaKurulum.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1e:30:4d:a3:0b:28:10:5d:a8:d2:be:6a:c5:aa:2d:38
Certificate

Issuer

CN=E-Tugra Organization Validated CA,OU=E-Tuğra Sertifikasyon Merkezi,O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş.,L=Ankara,C=TR

Not Before

08/12/2021, 06:38

Not After

08/12/2022, 06:38

Subject

CN=İHSAN BİLGİSAYAR YAZILIM LİMİTED ŞİRKET,O=İHSAN BİLGİSAYAR YAZILIM LİMİTED ŞİRKET,L=KOCAELİ,C=TR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

60:d6:c1:20:84:60:7a:f0
Certificate

Issuer

CN=E-Tugra Certification Authority,OU=E-Tugra Sertifikasyon Merkezi,O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş.,L=Ankara,C=TR

Not Before

05/03/2013, 12:42

Not After

03/03/2023, 12:09

Subject

CN=E-Tugra Organization Validated CA,OU=E-Tuğra Sertifikasyon Merkezi,O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş.,L=Ankara,C=TR

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

60:a4:dd:1d:6b:d5:6e:4a
Certificate

Issuer

CN=E-Tugra Certification Authority,OU=E-Tugra Sertifikasyon Merkezi,O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş.,L=Ankara,C=TR

Not Before

15/09/2014, 21:19

Not After

03/03/2023, 12:09

Subject

CN=E-Tuğra EBG Zaman Damgası Hizmet Sağlayıcısı,OU=E-Tuğra Sertifikasyon Merkezi,O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş.,L=Ankara,C=TR

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

60:de:80:8c:65:27:1f:0d:61:75:4a:fe:87:4f:06:ad:76:af:39:c5:c5:25:3c:90:2a:8b:a9:c8:81:b6:c3:01
Signer

Actual PE Digest

60:de:80:8c:65:27:1f:0d:61:75:4a:fe:87:4f:06:ad:76:af:39:c5:c5:25:3c:90:2a:8b:a9:c8:81:b6:c3:01

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

1e:30:4d:a3:0b:28:10:5d:a8:d2:be:6a:c5:aa:2d:38Certificate

Extended Key Usages

Key Usages

60:d6:c1:20:84:60:7a:f0Certificate

Key Usages

60:a4:dd:1d:6b:d5:6e:4aCertificate

Extended Key Usages

Key Usages

60:de:80:8c:65:27:1f:0d:61:75:4a:fe:87:4f:06:ad:76:af:39:c5:c5:25:3c:90:2a:8b:a9:c8:81:b6:c3:01Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rsrc Size: 77KB - Virtual size: 77KB

.reloc Size: 512B - Virtual size: 12B

1e:30:4d:a3:0b:28:10:5d:a8:d2:be:6a:c5:aa:2d:38
Certificate

60:d6:c1:20:84:60:7a:f0
Certificate

60:a4:dd:1d:6b:d5:6e:4a
Certificate

60:de:80:8c:65:27:1f:0d:61:75:4a:fe:87:4f:06:ad:76:af:39:c5:c5:25:3c:90:2a:8b:a9:c8:81:b6:c3:01
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rsrc
Size: 77KB - Virtual size: 77KB

.reloc
Size: 512B - Virtual size: 12B