Static task
static1
Behavioral task
behavioral1
Sample
hesaphareketi-01.PDF.exe
Resource
win7-20230220-en
General
-
Target
hesaphareketi-01.PDF.exe
-
Size
739KB
-
MD5
e9d423ad70831fee10afa1a3a58da8c0
-
SHA1
305c942109bb57a34791689d76fc2e013cd96d41
-
SHA256
ea370765d72286adf1310958539f8caed1eeab11b23644b4f0672840e3c937af
-
SHA512
17a18bd014479bd2c20ed891fb4c719038416e18a1b61e13717b89f739914213893e9b1e36e00e52e6aee420325bfe0f76f01af4496704024bcb069fe99c9315
-
SSDEEP
12288:9rHkmFx2iqNhujGjUR9HCxnbD0gaJ5oAmk7WKR5njrK8MHJMtrDaOfqx:tEmFxU8Cxnf0gq5OgWKrvzNtrDx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hesaphareketi-01.PDF.exe
Files
-
hesaphareketi-01.PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 722KB - Virtual size: 722KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ