rFİYATTEKLİFİHK[.]1X40HC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rFİYATTEKLİFİHK.1X40HC.exe
Size

695KB
MD5

ad5e19116de37ebc65be73f634f44ebf
SHA1

5ae6419b15818c01ea646b12d908a2a3f3b9dfa7
SHA256

1114073506daab881c22bce61bd90102035168e438f38e854f6ec4c06d6d32c7
SHA512

7f8463bb925f41bfe3ec1e4568993b8c6d7fbf4ef0bceed44c4b47c8425a59c1f5cac450b813bb2c9a0d8dae7742c12a7a992f07ba406670092ec5a64b0724a9
SSDEEP

12288:VPUD2iNPBJI3e5EC2U1cwiL355bQpK6xOaBHzzcijTx3wfwZN:pE1xuef2kcxL3gK6gyzzcinx3wf+N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rFİYATTEKLİFİHK.1X40HC.exe

Files

rFİYATTEKLİFİHK.1X40HC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ