Static task
static1
Behavioral task
behavioral1
Sample
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
Resource
win10v2004-20240508-en
General
-
Target
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
-
Size
781KB
-
MD5
0a4b0ad0f1b172acacb64b09cf6e4277
-
SHA1
4d9861a209f9a4f0eae42b5d4290a9f1079fbeb3
-
SHA256
6e96f02123bda97a2255ac99a19e72e477237ecfd69755dc042f243affd34af4
-
SHA512
eebee09524f5a4307e7d4bfcd88aa2301a24c726779d64af610fd294a96d963267266a0c5024932f105c7355304103f6e7df46336a66c14f781cc8f72ecacdfd
-
SSDEEP
12288:uuH6JNf+w5TZ5kwf4f/UaQWcpfKa3WwtCJNGEzHmRFMgkbwjZPs6WmCW6:SJTTZ5kuh1CJVGR6gwwa3z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
Files
-
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 767KB - Virtual size: 767KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ