Static task
static1
Behavioral task
behavioral1
Sample
HalkbankEkstre20230501080311746465.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HalkbankEkstre20230501080311746465.exe
Resource
win10v2004-20230220-en
General
-
Target
HalkbankEkstre20230501080311746465.exe
-
Size
831KB
-
MD5
a8b7d41fc81e7c04f21bcf8b8fcc5cda
-
SHA1
af51534bfe77d0ed0258110e2c50ead1af46b77a
-
SHA256
6056bd2c5f4adeadbafa4e630874fe41cf4cce06d46a7bc68a66e91443d108bf
-
SHA512
aaeab5b909900ef2c11c63d75d5921515fcaff9d8fef7c92777cf9197ac59af004e443d8adb37efd090e297238bbed0154f68d59d7452f3c5a209df8e6cb892b
-
SSDEEP
12288:fYamM5hj9E2K5k9SGwLkmZ/fM74d2unVqDPc:JmM1MwmZ/fW4YsqLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HalkbankEkstre20230501080311746465.exe
Files
-
HalkbankEkstre20230501080311746465.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 539KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ