Static task
static1
Behavioral task
behavioral1
Sample
Hareketleri-Bilgilendirmesi_PDF.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Hareketleri-Bilgilendirmesi_PDF.exe
Resource
win10v2004-20231215-en
General
-
Target
Hareketleri-Bilgilendirmesi_PDF.exe
-
Size
184KB
-
MD5
989f27d1fe3c72100e3450f108f36898
-
SHA1
45032965f6d2ae5fd3ddcaff561087e9ad46ee51
-
SHA256
a54dc3390eaea1e86acdbc8abe74af7f4cda5f579f8ecc3182f314427fab0658
-
SHA512
781a90eb49270423e8ea81117b5b0ef52cd8738bd5a3bd3c3c614278598c46f8a7daff938f681d611ac07d23559f97793a5ff581ebd87bc0acbc364b6d977dd9
-
SSDEEP
3072:SJFLMLcFoIcv6av0XCx9mD1zoaHJkaQmhzVfKg2oL13h7xHJmUmo1TtPUasCXNP4:SXLMLcKj6KmD1zoaHJkaQmhzVfKg2oLI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hareketleri-Bilgilendirmesi_PDF.exe
Files
-
Hareketleri-Bilgilendirmesi_PDF.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ