22082024_2331_22082024_Ödeme pdf[.]rar | Triage

Sharing

General

Target

22082024_2331_22082024_Ödeme pdf.rar
Size

931KB
MD5

e95f162358c55172c6eb267a16b74495
SHA1

1cc0ae766079cbf38e696a83433db82e2e0d04c0
SHA256

bced54f899e912b36d1aadbcbfc8db5298f5abe9cbd512fd708d24d6beaaaf3b
SHA512

470615f66d72d09527fa1ffb9ab94fe4d1c019a76e3ea268723e7f4ecc4b0b5fd0c1d5c2a91337f6418d746d21151ad3c82ee4641dacd6f8fbd8c41b361a9118
SSDEEP

24576:3I6qi9IPuFa/0ji/qQQh0Cz6jhhvFY/H08f:3I6qiOGKzlCz67va/H08f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fimnrqups.exe

Files

22082024_2331_22082024_Ödeme pdf.rar
.rar

Password: infected
Fimnrqups.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 973KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ