Static task
static1
Behavioral task
behavioral1
Sample
dekont ( 65).pdf Garanti BBVA scan0010.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dekont ( 65).pdf Garanti BBVA scan0010.exe
Resource
win10v2004-20230221-en
General
-
Target
dekont ( 65).pdf Garanti BBVA scan0010.exe
-
Size
750KB
-
MD5
4a801dd7a0e3dde542a373e12c268510
-
SHA1
e0f702bf548a48a3fbf451a3b2eac9919f8e66fc
-
SHA256
1aad8a04f82d296e91f7fa3d3c0ec03ae6eb0239f1bc43e8d2dbdc70772ccc94
-
SHA512
768aab5400f183f502e330b15c14f6e72703b3525c46831998a4b76c606dbecf33f400a925dc36bcee79ca8fdae9dcd63e58f2fe39fd95b2aa6d5ca886b7714c
-
SSDEEP
12288:sTTx0YPX/NqPsci70o+9134M3lvuZfWgVrW53/bQp5F4/PkWoWleTY7B:sTWHPsckz+9mzZfWgVrw3ms/7oWleTg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dekont ( 65).pdf Garanti BBVA scan0010.exe
Files
-
dekont ( 65).pdf Garanti BBVA scan0010.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 738KB - Virtual size: 737KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ