FATURA VE BELGELER[.]exe | Triage

Sharing

General

Target

FATURA VE BELGELER.exe
Size

983KB
MD5

bc67c9e1cb0baa00d58578b2a265e188
SHA1

367f81ab9444fbb2508f2c43bb957ea5a826c689
SHA256

31048e7a67338b361b72ec9cf70fc916ef5d6896571c5e75f5e5d050d55dd0e4
SHA512

5e05ab0ca81702177f550c69b5fd227d9ba54af2c5ebe6aafb2459c2ab6f5ee701044fbca6da781678e4603ced5f41418e5c62e63111bada7c4ce04d10a630a0
SSDEEP

24576:ZwoIc0OkVYkIawkqH+IG/Wtywj7UxpgCOdw:nIkIIgWUiwxp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FATURA VE BELGELER.exe

Files

FATURA VE BELGELER.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RQRY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ