Static task
static1
Behavioral task
behavioral1
Sample
Hesaphareketi-01.exe
Resource
win7-20230220-en
General
-
Target
Hesaphareketi-01.exe
-
Size
808KB
-
MD5
e9d47eebafccb6fb20a3aebba95f663f
-
SHA1
26da35cd58eaa58a826c62e1d5148ba0141b14ea
-
SHA256
1fe93bcce0611f7025ad13add45a4f37516a1e9b3f348e553fa27d184bf441c7
-
SHA512
616146e3400edd83294a296dedfa6df950be05c7d0dc7c89f9552d0cadedcd2f6e51645d36ba8fa30bfc97f0bb7887f0ef6fcf73a0c96b1becb55e0cd22ebbc8
-
SSDEEP
12288:kqBxfzjiQLz7/nYanj7nHa+Go2RiBhweZxp1JMuPRCYw5cCmMVen+D:kqnJzbYOj7n6+0Gjp1i2QYwNWE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hesaphareketi-01.exe
Files
-
Hesaphareketi-01.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 707KB - Virtual size: 707KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ