Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230723_080713_458894.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230723_080713_458894.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
Halkbank_Ekstre_20230723_080713_458894.pdf.exe
-
Size
809KB
-
MD5
bd312625b12c51b9b43b63626fc3e2d9
-
SHA1
d0eb5ca3ebf499647bc1d36e2dd5475bbafeb5a8
-
SHA256
e5422aab2b092de22741f596fef6ec85bb285f9ddee4efd3b1e5a165f7bddbaa
-
SHA512
8d50f6124bc091dbdb06151f786fc41dcab7471a4bdd27fc7fcaf19788645290d8b913cf57a583f5ed0d81dafa99328b47c7afd722bdb6a5b94264856f097dc8
-
SSDEEP
12288:mZvJRBusykXFmATPMXVw9xbA+GyAI84ioERNR81TzBc:oFuw4yMlw9KhyadoEnUzB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank_Ekstre_20230723_080713_458894.pdf.exe
Files
-
Halkbank_Ekstre_20230723_080713_458894.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 800KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ