Static task
static1
Behavioral task
behavioral1
Sample
PO-1124-0018- TTR-ASP1 .. 20 adet 0191621.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
PO-1124-0018- TTR-ASP1 .. 20 adet 0191621.exe
Resource
win10v2004-20241007-en
General
-
Target
PO-1124-0018- TTR-ASP1 .. 20 adet 0191621.exe
-
Size
773KB
-
MD5
4b393b41e5b7bdd02e481816bec9ff4a
-
SHA1
35b60bdfa5130cc88b508f4fee9c226a2277517b
-
SHA256
b71fb82589e3532a9390352bc87f7c2edc2cd7fae723fe203500350a31559e17
-
SHA512
28ae160172d1d13a8b56dac51dd38f44c1cbf2c4755300d34adfc5c5638ee2375bc7cf8b29e8173933f0f3e672cd2e8e8469fa341e3356a0c7e34153e08ac0e3
-
SSDEEP
12288:ipdY9shQgZCnoCKpJTH7uag0rQ8Vt7W68RNkBXKU5YYyTAo187Ce6m05/W:WdhlyzKrHSaVrQ8i6UkxKVaSR7m05/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PO-1124-0018- TTR-ASP1 .. 20 adet 0191621.exe
Files
-
PO-1124-0018- TTR-ASP1 .. 20 adet 0191621.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ