Ziraat Bankası Swift Mesaji[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ziraat Bankası Swift Mesaji.exe
Size

44KB
MD5

b0a55fb7d8d30530c88ff1d89d9fd0a1
SHA1

6415071bf08307b1ad29c87741a7771c602d2b99
SHA256

58c869d8fe83c78a6c5ce40e87287f7dee2f9a7e363dae598c3ba629cde8ab6c
SHA512

a62eb42ef4c74ff6d99f4c24ed1824734e436f73f2721bbfd0392000421c04575efacdee2ff3f1015e2275c7f0a5cec78384b336f5644afc548fa1a2c7c03efa
SSDEEP

768:GRUMd8wt2hCwHNwfkLASCUaOYHBS5jHZiTuJ6MCTSDvv:GRUg8wt2owt/LrISHV6gDvv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ziraat Bankası Swift Mesaji.exe

Files

Ziraat Bankası Swift Mesaji.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ