CaRO.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
Fiyat teklifi hk.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
Fiyat teklifi hk.exe
Resource
win10v2004-20250314-en
General
-
Target
Fiyat teklifi hk.exe
-
Size
744KB
-
MD5
f41bb88f7e4dcf7da1752be392809076
-
SHA1
a1d308e08021468587fb29bc902aae7f3ab415fc
-
SHA256
db49472040ee226b7140171b9202e05386125f9b9e4ed7fce4509ed3c8a20db9
-
SHA512
5d3c20b3f25affa7ac0ec365c532eafb36c8b3d01cf5aa50a677d9cc4b76fbe7be05482e1f1b79e47e764efa0e329dabb6b590ad081cff040546b925522a6301
-
SSDEEP
12288:YdulYyOn6nzx7qJgB67Zlgns4HAJRt5O9uBsz8itCLH4G3HA2qU+F2d6qAQDHL:LY9n6nhb6CWO9uPZHA2z6qAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Fiyat teklifi hk.exe
Files
-
Fiyat teklifi hk.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 741KB - Virtual size: 741KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ