Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230821_080757_783952.pdf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230821_080757_783952.pdf.exe
Resource
win10v2004-20230703-en
General
-
Target
Halkbank_Ekstre_20230821_080757_783952.pdf.exe
-
Size
1.0MB
-
MD5
ff3f88db42b51b8928be3f1f08d7c1ca
-
SHA1
e6cbc737d151b54129bf082b4def740cffe6d137
-
SHA256
664e98a05e0cdd62d0f97525f2255f1c19b5b8a1d8091a362ef5fbc007c2715c
-
SHA512
82cfd6f2de00a5743ec3a8d1f65d3f0326eaf034fed3c565f7b4b4dec33f892ef2c9d5fcd6ceaaf40d94dc4ca8d6368cb55410878682a811457f56daed121193
-
SSDEEP
24576:FSqlCe9qhJg3duRJ8P+B6nsOkzwTsnW+55A:tlCe9qhJ0d+CsO9bU5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank_Ekstre_20230821_080757_783952.pdf.exe
Files
-
Halkbank_Ekstre_20230821_080757_783952.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ