Static task
static1
Behavioral task
behavioral1
Sample
41570002689_20230609_05352297_HesapOzeti.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
41570002689_20230609_05352297_HesapOzeti.exe
Resource
win10v2004-20230221-en
General
-
Target
41570002689_20230609_05352297_HesapOzeti.exe
-
Size
746KB
-
MD5
dd329b3815943cb003f5b91d1a68a036
-
SHA1
4efc8b61727d0831036df2222fd7610d45918032
-
SHA256
a83423d3a684c1defbb7b445d0594e8074f803fbb4b170a3450e3879aa619886
-
SHA512
f56656ee53874f0628dc0be7522909ec8cc809a084758f45bff0750d90914713df6c279ec2162bb7f8ebcf6b1ff123ebe3009dd78ddacfc2bbe58cc5eb0598d2
-
SSDEEP
12288:hNPWR28Le0cY+Yg9fb9XqYCUvCAzJJUo3h3YRa+AzCBFYfx:h5+xL9Rk9UUvCAh3h3bxx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41570002689_20230609_05352297_HesapOzeti.exe
Files
-
41570002689_20230609_05352297_HesapOzeti.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ