53fd9545cd7623e6fc160a46ef5e68b9bbf5313b302d7ed6290e56a9be2ff8a7.bin
- SHA256 53fd9545cd7623e6fc160a46ef5e68b9bbf5313b302d7ed6290e56a9be2ff8a7
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Teklif Talebi-Sipariş-VSP251456.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Teklif Talebi-Sipariş-VSP251456.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target 53fd9545cd7623e6fc160a46ef5e68b9bbf5313b302d7ed6290e56a9be2ff8a7.bin
- Size 416KB
- Sample260908-negf2sam21
- SHA256 53fd9545cd7623e6fc160a46ef5e68b9bbf5313b302d7ed6290e56a9be2ff8a7
- MD5 6df55004934da06c9d89c7d144ebf210
- SHA1 60c82137d9ab8f1a364705a309677b5c54cfdb1c
- SHA512 a8a75ae8ffe09e32fe731630b3214542ffd1001fd753d3c98573b0c36aaec28c0a26e51a7ee5edc3be6b5530a5bed27a46695eae9a1563f34e94c1befc122d0f
- SSDEEP 12288:+ocrb2Ofwz0+kp+6CGhJiAmJPNaXysYa7KyW6xuHKw:+ocNwz0+h6CGfLmJlIJ7ar
- TLSH T1A89423FE8299D6CE68E21CE4A6D5CF37933E0731E6C5219EC1EDE93151C799A720A01C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Teklif Talebi-Sipariş-VSP251456.exe
File Explorer
-
53fd9545cd7623e6fc160a46ef5e68b9bbf5313b302d7ed6290e56a9be2ff8a7.bin.rar 416KB
-
Teklif Talebi-Sipariş-VSP251456.exe.exe 868KB
Teklif Talebi-Sipariş-VSP251456.exe
- IMPHASH b84e33ac3904e9612349e55b81587757
- SHA256 9c1a7c0df8bfa2e8a3c461d469545b47749a5f2de3289c9568698158d20ea8d1
- MD5 229d31134ef9920dc4b1f9556435e480
- SHA1 a6606632b7945a5b77919ee8c7dd2010bf855341
- SHA512 a5b19df4ce2bc6eb1494704b68a2f14e0854eec357b3395dba18e83bcee7284ca3ab903786c8bcefb5654b54a86b7a2da80dfa2055b8dc4883bd9e2b94b1ec98
- SSDEEP 24576:Lyajifr4pP1y2kRHcbX7amM6xsdD9WxgbOKXtN:LyajOHlcj7u6xe9cgyc
- TLSH T1D6157C15F3D451F4E22BD178CA964333EBB6B8401761AADB0655E2252F33AD46F3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
560080
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
RegisterEventSourceW
ReportEventW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
DeregisterEventSource
bcrypt
BCryptGenRandom
kernel32
InitializeCriticalSectionEx
EncodePointer
CloseHandle
CreateEventExW
DuplicateHandle
FormatMessageW
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessorNumberEx
GetCurrentThread
GetEnvironmentVariableW
GetLastError
GetModuleFileNameW
GetStdHandle
GetThreadPriority
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
RaiseFailFastException
SetEvent
SetLastError
Sleep
SleepEx
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WideCharToMultiByte
WriteFile
RaiseException
AddVectoredExceptionHandler
GetModuleHandleW
GetProcAddress
RtlVirtualUnwind
RtlCaptureContext
RtlRestoreContext
VerSetConditionMask
FlsAlloc
FlsGetValue
FlsSetValue
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetCurrentProcessId
SwitchToThread
CreateThread
GetCurrentThreadId
SetThreadPriority
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
CreateMemoryResourceNotification
QueryInformationJobObject
GetModuleHandleExW
LoadLibraryExW
GetProcessAffinityMask
VerifyVersionInfoW
InitializeContext
GetEnabledXStateFeatures
LocateXStateFeature
SetXStateFeaturesMask
VirtualQuery
DebugBreak
WaitForSingleObject
GlobalMemoryStatusEx
GetSystemInfo
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
IsDebuggerPresent
GetSystemTimeAsFileTime
FlushProcessWriteBuffers
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FlsFree
RtlPcToFileHeader
RtlUnwindEx
SetUnhandledExceptionFilter
InitializeSListHead
ntdll
RtlGetCurrentPeb
ole32
CoInitializeEx
CoUninitialize
CoWaitForMultipleHandles
CoGetApartmentType
api-ms-win-crt-math-l1-1-0
log
__setusermatherr
api-ms-win-crt-string-l1-1-0
strcmp
strcpy_s
strcpy
strlen
_stricmp
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vsnprintf_s
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
abort
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
exit
_exit
terminate
__p___argc
__p___wargv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
malloc
free
_callnewh
calloc
Name
.text
Size
565KB
Virtual Size
564KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
159KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
46KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=9, id=259, version=35721,
count=13, id=260, version=35721,
count=47, id=261, version=35721,
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=33145,
count=163, id=1, productName=Unmarked objects,
count=8, id=259, version=36248,
count=8, id=260, version=36248,
count=1, productName=Unmarked objects (old),
count=50, id=261, version=36248,
count=1, id=256, version=36252,
count=1, id=258, version=36252,