Static task
static1
Behavioral task
behavioral1
Sample
FATURA VE BELGELER.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FATURA VE BELGELER.exe
Resource
win10v2004-20240611-en
General
-
Target
FATURA VE BELGELER.exe
-
Size
3.1MB
-
MD5
23609f322fc7bc90115ec085804e9293
-
SHA1
95dc1d179e506a0009ea22270bf0f6c4414bddff
-
SHA256
568d52c4bf9c07076bf0249bd9da3424a0d6d58e404a3354a2a9181626e125e3
-
SHA512
eb86a48e2da1417eb9bceb5a4218342dddeb2b8f1f207151e62b476f6b051484e0e246bb2a255308ca082877367c4cd5abe5f1b1e0a9de93b8476f658932794e
-
SSDEEP
12288:kFyvY4s3cTbUVxAk+t9ThABgx88fuc66kyt1RvATykse57jkXF:k8vYuTseb9TeuJqIBAuz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FATURA VE BELGELER.exe
Files
-
FATURA VE BELGELER.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ