Static task
static1
Behavioral task
behavioral1
Sample
53060033570_20230519_08055750_HesapOzeti.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
53060033570_20230519_08055750_HesapOzeti.exe
Resource
win10v2004-20230703-en
General
-
Target
53060033570_20230519_08055750_HesapOzeti.exe
-
Size
566KB
-
MD5
fd4a5e5d5214e9fd96494157a1fdf896
-
SHA1
4d68d34c330a1b08c51f5b28d4d945bd2de64c18
-
SHA256
5ddb8e1199d3dfd3ab099e813a7650e692a243dba79e9eeda5def71ca4d5d0be
-
SHA512
043dba3fd7bde7be491cbd1985df93e8854f0cad39e9f529f27b85c32c3300d9657a8a77cfd8102fc96bd31842f1ead084f6792bd635e4c33e9fcb5bc4256865
-
SSDEEP
12288:ruPni8lTDAOZXIIIGznLxklo/31cNXcBIqJWr6lQxDG15:KdlfxIgNklY2cBzWr6GRo5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53060033570_20230519_08055750_HesapOzeti.exe
Files
-
53060033570_20230519_08055750_HesapOzeti.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 563KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ