Static task
static1
Behavioral task
behavioral1
Sample
ziraat bankasi swift mesaji.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ziraat bankasi swift mesaji.exe
Resource
win10v2004-20220901-en
General
-
Target
ziraat bankasi swift mesaji.exe
-
Size
213KB
-
MD5
50ae452a762aae14ccab1d1e56983307
-
SHA1
1fe167e21638f2891585d7e1498160e3d3720594
-
SHA256
3f3f17de70e897ba762f6a6073b6716a4fc01e04ea0038a4f01ce7842c7d8a74
-
SHA512
9c36098e536cd242f99ba1eeb5a4606a823e95aef7d0d854e26bca9945cb134c9e8d9e137b63638aea985e23e6a82c9c8c061b3b1b56769f832b1ce9c1d9a8b1
-
SSDEEP
3072:GB0z1qxbki54KcMcc+4bIsJUWGTBPZFyfShcP:GB0z1qU7c+4Hql
Malware Config
Signatures
Files
-
ziraat bankasi swift mesaji.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ