sipariş formu_831512[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sipariş formu_831512.exe
Size

956KB
MD5

7a45c25d30e6d35f3c6ae043f38f2f45
SHA1

9f8e3a5f44d9e67a2389d901ab6649513c9db550
SHA256

565f1c124c463e07f03cd0271718b8ff9443f87934327cb29233253c43df7419
SHA512

b0e66165a36aae346d4299187de4dd5e074e0d3f3ba476181bd44106e90bb44ab5f8d38e07f7b8fec3fdf23bea9538753a9ffc8b32d95b6ee9eb257d7235a714
SSDEEP

12288:7dJS4VJ4WowHhTB67XcMxzdRKhP7nfo3o5KpJmAGwAfUoxG9r7Cq3S:XScKWXT67XcphTfZKpJIwA/O7jS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sipariş formu_831512.exe

Files

sipariş formu_831512.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

CazI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ