Ziraat Bankası Swift Mesajı-PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ziraat Bankası Swift Mesajı-PDF.exe
Size

723KB
MD5

713ef1e1778200748eb51107b0fbca76
SHA1

1f2a67c621ad64f4cf228c0ae4e274532fe3ae41
SHA256

ffe8625be597b053616f946809e0bb323a076a044212d8ab8b571b46c02c81c4
SHA512

29119751eb45f49f42f0104c01c715e0d1b44c56648276d593771fbfc2d22c7a670e7ece03611c211ee34269a1886fe2ce932c612ad22bcac0c7d43daa39150b
SSDEEP

12288:2Rry3ItEaI3IpvTLyqYGgbkC+mWByYDF2Nt7fsXkU4SEqQ/+8rO3anzaKSB:kr1viVGg4C+mqDe7fsUdT/+8xzaKS

Score

1^/10

Malware Config

Signatures

Files

Ziraat Bankası Swift Mesajı-PDF.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ