Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230516_0819705_452378.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230516_0819705_452378.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Halkbank_Ekstre_20230516_0819705_452378.pdf.exe
-
Size
853KB
-
MD5
58d456f97f54cfda39bd01159fa5795c
-
SHA1
ee224f8e2a01b12aff75c22414f835b4b530dfb0
-
SHA256
5b67a54df45cc6e181388808f9cb35b0c2660d27b895889da37938408fe22072
-
SHA512
736d3f96b95a268ef1bf38e17d08100209c07fc1eb82244e9aef6e574afec5c2ce004173ed3973866a037f1fe68d8a681d5c071bdd6f4c944b836fe38002cc69
-
SSDEEP
12288:gv51Z2pNKbO4NW87Jz4XPD4ukjuZM/LBxKQIZjU:cPZ2pgbOKx4XL4MZM/LP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank_Ekstre_20230516_0819705_452378.pdf.exe
Files
-
Halkbank_Ekstre_20230516_0819705_452378.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 561KB - Virtual size: 561KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ