YENİ SİPARİŞ YILDIRIMMEKANIK RFQ 2701203[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YENİ SİPARİŞ YILDIRIMMEKANIK RFQ 2701203.gz
Size

666KB
MD5

7078787e4c65f205cf6ca49c8ed22ee6
SHA1

7063bc3fbe7c5529125660d0040c423cf5c9fe1f
SHA256

d9442ec873ad1f254156334c441ee75d7ffbdd221e71aa56fdd823feb70089fc
SHA512

2fb63a1a9f3502acf2e4358d14f3af2ca744bcf5339c9bd6a86f31cdb26888cf9ef78db66b64a373dd9514d3137f2c16e0c1625b4762d3b97e692734e76cb680
SSDEEP

12288:9n86EQu9ewvbFA6QEKu+v49H62JH/EQ0d8ODGKEdZGmCegP1:dZ4PO63H62xsnd91EdjCem1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/YENİ SİPARİŞ YILDIRIMMEKANIK RFQ 2701203.exe

Files

YENİ SİPARİŞ YILDIRIMMEKANIK RFQ 2701203.gz
.rar
YENİ SİPARİŞ YILDIRIMMEKANIK RFQ 2701203.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Yfez.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ