Mart ayı ödemesi[.]tgz | Triage

Resubmissions

27/03/2024, 10:57

240327-m2kljsdg21 3

27/03/2024, 10:52

240327-mytp2sae54 3

Sharing

Copy URL Twitter E-mail

General

Target

Mart ayı ödemesi.tgz
Size

1.4MB
MD5

8680ab0af1d3999ec6890889515a1949
SHA1

5ffac6a817bc00a0e99e9aac2d8e3496c2eba22e
SHA256

238195a7a70e80f04d3f297ca0a0be48267cdd63fdc24636d38f944dfbcb165d
SHA512

cadba6a4c4655457fbc3aa389c3dd4e5cde216191905418f3e7d862d9d59a22c26fa1fbf11c4fe62b3136aa36c839a57a450e90be7fbc11327931741f4a65494
SSDEEP

12288:r8WyEoPPOdpGvmpJFxyd3ttGq6gwr9itV6wp+YV8se5:rNJpX3q3tGq6NrS66s5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Mart ayı ödemesi.exe

Files

Mart ayı ödemesi.tgz
.gz
sample
.tar
Mart ayı ödemesi.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hvVn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ