Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20232505_075616_005737.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20232505_075616_005737.exe
Resource
win10v2004-20230220-en
General
-
Target
Halkbank_Ekstre_20232505_075616_005737.exe
-
Size
689KB
-
MD5
03c4ee1189cef2664a6b227f7fb0ad38
-
SHA1
6c5cf272392e5888a8d89f346f59c0c0f36fb572
-
SHA256
2eff68c23c7347d6a7614ae78fb7860aa81cebc0037d9c2a95fb795c2e2b3d6f
-
SHA512
91915ed15181fa3080f3e9d10b38f18a9cfe044a787bd17020fe2c74923a5ce882e39d1e14a8bfc7effc1ecc382cd3fb836a43a1d2fa2faa730a9f789f016983
-
SSDEEP
12288:MPRmzZBEP85AyFWx28jKLixint9zJKACPTYjoa1KzkUrkwz:b9BEP8iyF698dmPTYIzkUY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank_Ekstre_20232505_075616_005737.exe
Files
-
Halkbank_Ekstre_20232505_075616_005737.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ