Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230501_080311_746465.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230501_080311_746465.exe
Resource
win10v2004-20230220-en
General
-
Target
DA979F99F942C4A0C78FEA85AA734BD437409A60EFB99D8051843FB913CF6448
-
Size
476KB
-
MD5
ed74b8c6a44bc441727193a8e2ba0211
-
SHA1
3c834479d60bb3f472830a94b493d2898d5d6818
-
SHA256
da979f99f942c4a0c78fea85aa734bd437409a60efb99d8051843fb913cf6448
-
SHA512
7cf1990eb9807065ccf74904ef208a1c387b6909b13e58a5c91a28880c0c5d65f5b484719e4049a0e9a1ee34f5d907510d7afeea8a70e5943a3b4a2b2db26eb5
-
SSDEEP
12288:0kvVZFfQAvyNjwn6n/8ivCM/4qQy9pRfUQPewFlAkMXdGkCV:nvTFfuN1/8mCM9pVfLlydsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Halkbank_Ekstre_20230501_080311_746465.exe
Files
-
DA979F99F942C4A0C78FEA85AA734BD437409A60EFB99D8051843FB913CF6448.rar
-
Halkbank_Ekstre_20230501_080311_746465.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 539KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ