Static task
static1
Behavioral task
behavioral1
Sample
Ödeme onaylama.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Ödeme onaylama.exe
Resource
win10v2004-20240412-en
General
-
Target
Ödeme onaylama.tgz
-
Size
1.5MB
-
MD5
fe58bd5d1ce643d563858a8fb640699f
-
SHA1
3c254d764cfc80e85fba809771b3c87ed02cbfb1
-
SHA256
9ddc064aa8d8bfe4bdbd4c14dca5783133c0236dcfe423755eb37e7370f15752
-
SHA512
0331fdf71e130511bad9a0fc19e0af395282f47a3dd933b651573bed0438b58a4bcd826252fcee436a05342f7a1a7ffd7349a78aa7184ddd1df4c0daa51f3e97
-
SSDEEP
24576:WwC93eIevVNa7JSn1jeZxeqHwSts4A2tm2e:W9elvLadSnwLfH9t93tm2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/Ödeme onaylama.exe
Files
-
Ödeme onaylama.tgz.gz
-
sample.tar
-
Ödeme onaylama.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 732KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ