Ziraat Bankası Swift Mesajı_pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ziraat Bankası Swift Mesajı_pdf.exe
Size

867KB
MD5

b1be431274c1195188d85cdca2e54426
SHA1

a2b2fa1463c92cf20d87cf77cc21120766c93fee
SHA256

676231f80f31bd98462da864a6b42c715d16fb19021b1c73ebf1dae44d136c9a
SHA512

e894eb752059827f226f5f6d6b5a893d3f278f5ee0d9f0cf24d7c4fee376352f9d1860f1aafbcb54c9ceae53e8b6669c8a3671f5b9c657be7e2f28227764dda5
SSDEEP

12288:FXNvmz5Fdfn959ra4Yf3hPOHlTBPjJOM/+CYLeOYRdbLmDwrjMk+/W22+:ENf9zPIx6lTBP9t+CYLDiKIM

Score

N/A

Malware Config

Signatures

Files

Ziraat Bankası Swift Mesajı_pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 840KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ