Static task
static1
Behavioral task
behavioral1
Sample
hesaphareketi-01.PDF.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
hesaphareketi-01.PDF.exe
Resource
win10v2004-20230220-en
General
-
Target
hesaphareketi-01.PDF.exe
-
Size
525KB
-
MD5
549fed02b6a67bb1ca8b80ce8bda0bef
-
SHA1
0e4049cec6e24443a8ebe4e88203897b5885a474
-
SHA256
ee79d711f50c08fc3f58d643b0974e2030d5f6f0479a5e000eaef3940f099636
-
SHA512
ebb8c93b79b963328c3270251adeef93c5508cc55ca929c42983f3f46e35f0abb4a82deb6bdff1214eb9b28579f4fdde18c7feeb6a2ca020a627d826be3e5f20
-
SSDEEP
12288:nqfdFI5GRF25snFrktWXBwwfTos3+eJA:qV7Rvn/2wbos9A
Malware Config
Signatures
Files
-
hesaphareketi-01.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 523KB - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ