Bursaderiosb_Sorgu_04[.]11[.]24[.]doc[.]exe | Triage

Sharing

General

Target

Bursaderiosb_Sorgu_04.11.24.doc.exe
Size

791KB
MD5

bf641cbd10ecb47360eb5f51aa1e18dd
SHA1

8cf79b4e1c56efa27686e75be6763d1626c52418
SHA256

cdcc9af94476ea2f08b7a948e5293405cf65e87a2496f3fd7743a35128bca523
SHA512

00b679d1afbb028951af5e0258d44ee9c59a38c6824078eb22cd606e146c4b6b60fdc8394cb1415beea6a9b78d8564ec0ae24429513452c907ec2f834d12b880
SSDEEP

24576:FY5/fh8ztYct9XR8UdtCVK9V7U3dMuZBBzjwYMXj3:K2tJ8UTCE7YJwHj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bursaderiosb_Sorgu_04.11.24.doc.exe

Files

Bursaderiosb_Sorgu_04.11.24.doc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HFPE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 788KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ