Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230821_080757_783952.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230821_080757_783952.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
6252fe63894bd43c81f5764789d93bc1622a4dd9881a05379730f497dd6fb91c
-
Size
930KB
-
MD5
f3fd420cba1f690332e49fbd3d2979a8
-
SHA1
76be427c18a7a201cb633e763609c1e509b4efb9
-
SHA256
6252fe63894bd43c81f5764789d93bc1622a4dd9881a05379730f497dd6fb91c
-
SHA512
a7690bfab52016fbb6aec8bd3bb9d2e33bd0b00495bc9fb7c14703b7dffc8300fc4f75ce90ade66f3cf87cfa095c09eb4c0af198073cb82bcef4dab74b57a0fd
-
SSDEEP
24576:3/M6feHYPcp/4rHx2WeJapu/8FAKuToHpcUYhdg:0s6p/SHx2Np0A964g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Halkbank_Ekstre_20230821_080757_783952.pdf.exe
Files
-
6252fe63894bd43c81f5764789d93bc1622a4dd9881a05379730f497dd6fb91c.zip
-
d83644cb5ff08867ef0daba8ea5f7c00.rar
-
Halkbank_Ekstre_20230821_080757_783952.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ