Static task
static1
Behavioral task
behavioral1
Sample
Ziraat Bankasi Swift Mesaji.pdf.exe
Resource
win7-20221111-en
General
-
Target
Ziraat Bankasi Swift Mesaji.pdf.exe
-
Size
1.1MB
-
MD5
884bd7c5f3fa58edd85ba3d268decbae
-
SHA1
11c68a384fcd12b77ca221e0eec1dd2683056dba
-
SHA256
9bb43e190685f86937e09673de3243cbe1971ecf0eab9b75e09d0de96e9764cb
-
SHA512
c55da0831713ce4a970efa6addf9fb0b5e32a851ac8e1745af8e5705395f3f3d14c36d64ed4ed67932b62aeea555b064f7b891cd656cfe879906b5a953d65fb2
-
SSDEEP
24576:IqqhCsJLFscvNVlu+99k4mrIl5tBfBFLgGZokXJVCQ6nP/A/mYx:NuLSclB35x5gG3azP4
Malware Config
Signatures
Files
-
Ziraat Bankasi Swift Mesaji.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ