aSqr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
Resource
win10v2004-20240611-en
General
-
Target
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
-
Size
985KB
-
MD5
ec74cb4d08421d9c0b646f7bf2152f22
-
SHA1
c347491cd4c7a5539daa553d350f983a095921fb
-
SHA256
a14a553ae23896f0aaf4c5ce96ed020743f71395230b1c7c2abff91bf45b44c6
-
SHA512
c4d6966d6d6a7a02998e52cc7eead974ad35930c909a46932b45be9cda00dcb08fcba51aab8c13fe3d5bc916c298417da153cef34d77d29af5e80dcb9d65d982
-
SSDEEP
24576:hOipzqLd1GnjRNd/FQDwh2hB1QcJjW+lkquvD:hxzqZ1+RN1FgSQjjuqs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe
Files
-
Siparis. 000867000960 TAVSAN order_Optium A.s 03.07.2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 959KB - Virtual size: 959KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ