f345da827400ab2558e12aebc9ddab22890f5c24e87261aed82a56a0ce95a510 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f345da827400ab2558e12aebc9ddab22890f5c24e87261aed82a56a0ce95a510
Size

34KB
MD5

edf44cfcf2ce00fe0a95199da37db53c
SHA1

c55546176e78e001cb60b2fdaad0f49b63afa384
SHA256

f345da827400ab2558e12aebc9ddab22890f5c24e87261aed82a56a0ce95a510
SHA512

f12a20f601c33b24c5c79b1d5c7c15919e044be9d427e172e07d8748a093d692690f4cb68ce41f54b79eb02eba85ddc8ac0f56e7fd3c67a22468469aef14f431
SSDEEP

768:VWfGa+puPcnLQfHMnYbz2uCO/k9kOkBsZMVfArNXReYkC6Th:+GlQcLQUSz2K/k9kOsEIh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FaturaHatırlatma.exe

Files

f345da827400ab2558e12aebc9ddab22890f5c24e87261aed82a56a0ce95a510
.zip
FaturaHatırlatma.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\CryptoObfuscator_Output\BCZVGJSDF24.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ