Static task
static1
Behavioral task
behavioral1
Sample
12220173387_20230502_13363111_Hesap0zeti.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
12220173387_20230502_13363111_Hesap0zeti.exe
Resource
win10v2004-20230220-en
General
-
Target
12220173387_20230502_13363111_Hesap0zeti.exe
-
Size
957KB
-
MD5
5ba4f2b2111946c168f918b20126d09a
-
SHA1
041c2cb33e8f4f30fb1fd4d7eb1ebcb8bf40d135
-
SHA256
0bb8804c64313e1cefa0d80c2b15c21ca642094579d8ac6a8dfd84abd526eb64
-
SHA512
9e5b481ac0d517fa624907ed370a420e7d0daeb77bf71b8574ba110fdaaea8caf35f748fbb92aa315910e2c48cc4d8027ff6c6fb195f265721d7553070272372
-
SSDEEP
12288:GKni4IyfEoZFYFaEsKvICeTOiUdDNdoqbaTVFdN5YKMZN1M:GKkoZFY4vtCeTQbGTVTN5ufW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12220173387_20230502_13363111_Hesap0zeti.exe
Files
-
12220173387_20230502_13363111_Hesap0zeti.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ