20240128_678833-Hesap - TL Özeti[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20240128_678833-Hesap - TL Özeti.pdf.exe
Size

847KB
MD5

fe5d4da9b40dbb8d7e87cbe36b35b68d
SHA1

a32438e13f0834cd0fec5335f88994e22050401f
SHA256

88fc5d96ebc31042f41c8d80e87a1d6b8c4fabe33f11717dbf417f969604af70
SHA512

1f887ec149fbced0e92213ed417a8459029307388725ec04d2e7b1120a482e63e0381ccb1f2d642c49dfa8a84318a5d196a0e3f7c862254471a61f7bec41f0af
SSDEEP

12288:c/EE8GILjWLWgHeBoH4vzEe94RRIMMRRc+VhDKujWhNqdgfQOlFutTM7b:RcHBY4eX8+VhBWh0WQQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20240128_678833-Hesap - TL Özeti.pdf.exe

Files

20240128_678833-Hesap - TL Özeti.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 840KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ