GEREKSİNİMLER_0023[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GEREKSİNİMLER_0023.rar
Size

498KB
MD5

eacd21f7414d8c8bdac2009fdb154391
SHA1

bbdd2a3d37a9e97aabb5c5c78fd6f885ca57b3b1
SHA256

6a9167fa3e6e30e60b24fb183f6b7e243f1b5f4dc11bddc5443ae6ffe1b686bc
SHA512

7a010048650af6d378a22d9713aae08a9ced32b518163b9b5abc54d13de70b65172e509c1245b5fa09a756578b46eab7afcddfbd556191812b90933fba20bd27
SSDEEP

12288:3mb7xbDc3RCGteXBHoT9MKDkcyRuQxSRLi1kwA5:3AhDchptkSCKDjyRFSRLi/A5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GEREKSİNİMLER_0023.exe

Files

GEREKSİNİMLER_0023.rar
.rar
GEREKSİNİMLER_0023.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

RbpY.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ