Static task
static1
Behavioral task
behavioral1
Sample
ZiraatBankasiSwiftMesaji202305012309.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ZiraatBankasiSwiftMesaji202305012309.exe
Resource
win10v2004-20220812-en
General
-
Target
ZiraatBankasiSwiftMesaji202305012309.exe
-
Size
284KB
-
MD5
4f12ae856628803e2c39dd1e4b990868
-
SHA1
47aa181d982267ae8fc9b79e56076d36b0b4d6f8
-
SHA256
55b54f2ee1d234bec2205c8edf7bf689677aec7f2ce0f9216222ae1bcf02d354
-
SHA512
7cf163871bf7d95e9f1ff397f380af4019e6894df7583d59fe932c329bae399b220810a4b825eb820942d1310515bfa5d70d398614d63f630d36cf4b1b31b9c8
-
SSDEEP
6144:BodqBOElLnthI9qcLM1GUfqu4CZitUlzfQv3tE:nBOUtW4GU1iilUvdE
Malware Config
Signatures
Files
-
ZiraatBankasiSwiftMesaji202305012309.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ