Odeme_belgesi[.]exe | Triage

Sharing

General

Target

Odeme_belgesi.exe
Size

242KB
MD5

a62267b983a96b83f7c64f20579992c7
SHA1

a32bc7a08572e485e5a396adad9a7da8ecf60ad6
SHA256

19074e7a2c8b41cebef774134e1caac0d9f085c58143d3a2ccdc46e77cadb61d
SHA512

9f0cb484e4082081fa10da7668e367a6b4655a93af1ba415c58800848548665a7b9c0aab61366b21cfa9923f70e7bc3e8c6c969b5fc26d6cd7d2bf15eb81e79e
SSDEEP

6144:R150wrA3nuGPJoVQuWozHl+2ryXezHabUpogdmpnh/bpiiLLTodF6aJV6I:ZA37JoVQuPLNHabEVAjpTLTodF6aJVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Odeme_belgesi.exe

Files

Odeme_belgesi.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

*le"yO9b
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ