Static task
static1
Behavioral task
behavioral1
Sample
HALKBANK.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
HALKBANK.exe
Resource
win10v2004-20230703-en
General
-
Target
Halkbank_Ekstre_20230704_105043_974864.img
-
Size
1.2MB
-
MD5
ba3201991c82a77623d3bbfef73adcd8
-
SHA1
22b1929cf01485a07e541bd855de54988ba7194f
-
SHA256
bbc05f01c117faf77ff7e4f60486df4dbc8bdf278b59cea0775409629d4e7b71
-
SHA512
c2f780f71fdc21c8d8cc399f9f0eadad34aeaf12363c93f98e3b8203f71b79971cde0a4e0b342768f45cce8bcdf4f69592842f06b401f76393de1b52c588e663
-
SSDEEP
12288:v2L0LR6u+YQKM2DobMWkM7Mo2ucx2DNZGHP0wEuMh:v1LRr+YQKMPz9fQs8HNMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HALKBANK.EXE
Files
-
Halkbank_Ekstre_20230704_105043_974864.img.iso
-
HALKBANK.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ