Static task
static1
Behavioral task
behavioral1
Sample
Ziraat-bankasiSwiftMessaji00001.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Ziraat-bankasiSwiftMessaji00001.exe
Resource
win10v2004-20221111-en
General
-
Target
Ziraat-bankasiSwiftMessaji00001.exe
-
Size
957KB
-
MD5
c477fed6490fdc0406ad07e2c119f73e
-
SHA1
28243ece16917acc27fea562f6ea6eaf7d535e55
-
SHA256
90b786543a37b1566f5b8bca8fd8e7ba7915d8f97217f2b9f985248a8d0d9fed
-
SHA512
0172177d9e145c84badbbe1c0da3a7d2cc1253b423cf3db4bfb922b7b3d4b50a8cf95e43dc704d832135f8cd40ff1fc890743d355b35c314796b414453a5ce95
-
SSDEEP
24576:2M+L74mBfNUstzoLHOPJnDsU7fRn0mYTis0euB3r8JN:fHanDGmYT8BI
Malware Config
Signatures
Files
-
Ziraat-bankasiSwiftMessaji00001.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 954KB - Virtual size: 954KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ