23[.]_TUMACIKFATURALAR[.]xlsx[.]exe

General

Target
23._TUMACIKFATURALAR.xlsx.exe
Size 821KB
Sample250306-nm8khaxrt6
SHA256 f18d276ce3ec088f6d446e409489bad5c9b613d6c1f10a6538724749c7cf2af6
MD5 dd6e3f2c8adb69c1572d43235a7b530f
SHA1 f73dd93046ad35a21a7c5f3a210f09e328a054fc
SHA512 d95d035bf78c97de1e5e21291d9e0d163acbbb47742a9a14e5422e21131d2e3576a7892cfd75467e36981f22b00e13dbd1bf7974e1caa61c2717d99f0f09c172
SSDEEP 24576:FM02MZV6XHcbMqZYEtok6s2r1gBT7mSi9oSv:FVO8bxYMo7r1YHmBoS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23._TUMACIKFATURALAR.xlsx.exe

File Explorer

23._TUMACIKFATURALAR.xlsx.exe

.exe 821KB

23._TUMACIKFATURALAR.xlsx.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f18d276ce3ec088f6d446e409489bad5c9b613d6c1f10a6538724749c7cf2af6
MD5 dd6e3f2c8adb69c1572d43235a7b530f
SHA1 f73dd93046ad35a21a7c5f3a210f09e328a054fc
SHA512 d95d035bf78c97de1e5e21291d9e0d163acbbb47742a9a14e5422e21131d2e3576a7892cfd75467e36981f22b00e13dbd1bf7974e1caa61c2717d99f0f09c172
SSDEEP 24576:FM02MZV6XHcbMqZYEtok6s2r1gBT7mSi9oSv:FVO8bxYMo7r1YHmBoS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

845574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdQk.pdb

23._TUMACIKFATURALAR.xlsx.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

23._TUMACIKFATURALAR.xlsx.exe

mscoree

dotnet