8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a[.]zip

General

Target
8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a.zip
Size 361KB
Sample241003-b6dg9ayaml
SHA256 8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a
MD5 e4642545e8067373a394cc144fc9c957
SHA1 4bf922369105fa909465f1912beb52bbad210c16
SHA512 00094497397cfbcdbc0450040f7ac57f13ab0e7701ae8b17f84e845edd90cb12064c1b824d769a4aa82834b2b481d1f49ace98dc2761f6e056c3bc6fcb98ee74
SSDEEP 6144:cUpCqk2i7LH/j1V/HquoL4/nIN/NB+DYRkfSh4//+oPrKC584UG+LWEF7AfD:rCq5iH/RVPXPunXKim/+oPrv5T1ZEFo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Odeme_belgesi.exe

File Explorer

8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a.zip

.zip 361KB
Mesaj.txt

25B
Odeme_belgesi.exe

.exe 540KB

8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a.zip

SHA256 8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a
MD5 e4642545e8067373a394cc144fc9c957
SHA1 4bf922369105fa909465f1912beb52bbad210c16
SHA512 00094497397cfbcdbc0450040f7ac57f13ab0e7701ae8b17f84e845edd90cb12064c1b824d769a4aa82834b2b481d1f49ace98dc2761f6e056c3bc6fcb98ee74
SSDEEP 6144:cUpCqk2i7LH/j1V/HquoL4/nIN/NB+DYRkfSh4//+oPrKC584UG+LWEF7AfD:rCq5iH/RVPXPunXKim/+oPrv5T1ZEFo
MD5 SHA1 SHA512 SSDEEP

Odeme_belgesi.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0f1bde8e151531aed752a337fcd392ab70e2839a42c4d61570b825fa44d4d365
MD5 90f4be8876c29b8a1003fad8cc920a82
SHA1 9954083d7206592481ad16804d2d230d052550f4
SHA512 8f8e29b2e4df6099a4fc2b03f562f6e6deb1071e45f54a300b331f994dfcf845bf2f2edae8217e6dcd728c8c23611387a3acbcef5aaeb4ff3a8d4955ada865c3
SSDEEP 12288:qxTUip/R3pX12nXGik/+oPrj5utJfS5bpZKh5tsd5Nrkkz:LWR3x1Wg9PNrkkz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

581642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a.zip

Mesaj.txt

Odeme_belgesi.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

8bf8454a9b12f906299a087fcab18e684cffb1bace2aca65802ea622d853b88a.zip

Mesaj.txt

Odeme_belgesi.exe

mscoree

dotnet