Static task
static1
Behavioral task
behavioral1
Sample
Hesaphareketi-001,pdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Hesaphareketi-001,pdf.exe
Resource
win10v2004-20220812-en
General
-
Target
Hesaphareketi-001,pdf.exe
-
Size
21KB
-
MD5
958ba282767aee7ee313ac28f4e010fd
-
SHA1
1d95529a755bfb1c39b79fd3915d55a95dec6a66
-
SHA256
270daae1261a5456d3a85fdd050e3f7c7f55ed69015bcffc1a4e958e2816a513
-
SHA512
f5a200471f933aa70d2e91745685e287f2a716a8ac97ddabbcd5ce43c8aa63cd75165ad4e6e944aaea72de155864cb9b734dab0d80edb530b2bbb35265f0dfd5
-
SSDEEP
384:KP4kZOL8LF7cS15iR/lW7VDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDyd5:KPfoQOYiR/lW7VDDDDDDDDDDDDDDDDDu
Malware Config
Signatures
Files
-
Hesaphareketi-001,pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ