Ödeme onaylama[.]tgz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ödeme onaylama.tgz
Size

1.3MB
MD5

b1ffee287dbed0a59580ce5705b2f240
SHA1

8647434cb1e35a0970c842a23b381b910768063f
SHA256

c19527d7ce93f2607a95d0e4b851506302371e99f8b7ac9ff8f8b920fbcb182d
SHA512

578e7af53f583b62c025c57931ec8fbe6ebad868a8caabf4444114f58a39e38c9cb16ca00393b3224aadc485335dd70dbaff8dc1499662d523cff2dd7e6a95c7
SSDEEP

12288:FgVtjqiTodOLpk9UWwSszP6TDJLt+Cd9gzRkBlhC5QaIUL:arjqldakHZszQh8kF4Q38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Ödeme onaylama.exe

Files

Ödeme onaylama.tgz
.gz
sample
.tar
Ödeme onaylama.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 805KB - Virtual size: 805KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ