Static task
static1
Behavioral task
behavioral1
Sample
hesaphareketi-01.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
hesaphareketi-01.exe
Resource
win10v2004-20230220-en
General
-
Target
hesaphareketi-01.exe
-
Size
723KB
-
MD5
1b34679340f165c5437b466afab7743b
-
SHA1
1784329356ebf95630e87b778048f4e0e31c84ce
-
SHA256
3dcb0606b40e8a5d64da878ee28ae32fcb1c6072aa9a238057548f34c8cdc59b
-
SHA512
fefb927bdec0cd0e40a870e21e24708100db21b61a02e5e6887b755eb4a7baedb3a10cfb075a04cec4366ff76db1231574348316e8c6a96374712415946237ee
-
SSDEEP
12288:s9HkmFx2iqNhujGjUmM0iP03/4/FSlyQLHs4Owyj/iafDcQyVJCCK/6:2EmFxUpM0iPDyhLHs4O7iI7WKi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hesaphareketi-01.exe
Files
-
hesaphareketi-01.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 706KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ