Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230530_9191004_547321.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230530_9191004_547321.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
Halkbank_Ekstre_20230530_9191004_547321.pdf.exe
-
Size
684KB
-
MD5
9caa09e7d70e9a7d6b053b901e45a2fe
-
SHA1
35862b85e08994fc5c46489f9fbce0e83239b972
-
SHA256
cadbf005a6af92551de5f1e9b1ac06e1c21343a70b5924732da21fb5c0b89f3d
-
SHA512
915ccee6180235bd2234a793f9c01d47f9df54b50d19d4351b050a458fd0f83e2d3809e7f7c687249f8e86c5335833678ad1131afc33125d2fd30ea8a0767eb8
-
SSDEEP
12288:ERP2B0xTGlxNqvNu2hZ+nUEsn9zKDGCFzXbIIGXXgjrEfUVc0QedmtJR:APLaVUH999zKDpBd3EfUa0p0/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank_Ekstre_20230530_9191004_547321.pdf.exe
Files
-
Halkbank_Ekstre_20230530_9191004_547321.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 660KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ