Static task
static1
Behavioral task
behavioral1
Sample
rHalkbank_Ekstre_20230321_080804_358439.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rHalkbank_Ekstre_20230321_080804_358439.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
rHalkbank_Ekstre_20230321_080804_358439.pdf.exe
-
Size
563KB
-
MD5
78fe6ec8f582a8d82b45e21f9145e87d
-
SHA1
ab0684bd54f83799cb5b5c77211e016b9496a12b
-
SHA256
307f012f74f209e4b8371400455ee296585a6d6a0d4c2195df2186ecaf0acd79
-
SHA512
66a784ece2ca4a002532563a16c70e29eef3b59da04046fcfc18173160d10bcdee4ddd7240e3cbaf7bdb19d0afe17d1270eef76b1dbc431f45516b8ed8815ad4
-
SSDEEP
12288:9qULmHUhdRrbowip2J/zQHYEZE91VFjfvjE23s:9LmHYdh0d60HYYE9rZps
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rHalkbank_Ekstre_20230321_080804_358439.pdf.exe
Files
-
rHalkbank_Ekstre_20230321_080804_358439.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ