Static task
static1
Behavioral task
behavioral1
Sample
hareketleriniz.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
hareketleriniz.exe
Resource
win10v2004-20241007-en
General
-
Target
40d966464cd7ad55d8ed44d2dd1208d72a85425b360934aa47abaa4df58623da
-
Size
2.5MB
-
MD5
f8a07a5919711a1374bb479d9ffea82e
-
SHA1
3fe2c88c19abaf5e03d07dc5a58951c9a9ddd7e2
-
SHA256
40d966464cd7ad55d8ed44d2dd1208d72a85425b360934aa47abaa4df58623da
-
SHA512
a3036980f355d368014c7c9c61e6e3ed3d6261d36a7f8215ca1386fd83cfaf5030c536fc6b90edc51ced3255d66dfdd4fea1fca10ce208e4615c2c2f7a0fa7e8
-
SSDEEP
49152:qKQ9dy4x8NXwkGOfEO0W8HGUnw8oyxNQBapXxNWeNy5ra8xRVT:q3+6oXwNOfEFWxUZoyxNQByNNaRVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hareketleriniz.exe
Files
-
40d966464cd7ad55d8ed44d2dd1208d72a85425b360934aa47abaa4df58623da.zip
-
hareketleriniz.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 470KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ