Static task
static1
Behavioral task
behavioral1
Sample
ZiraatEkstre_202308.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ZiraatEkstre_202308.exe
Resource
win10v2004-20230824-en
General
-
Target
ZiraatEkstre_202308.exe
-
Size
847KB
-
MD5
23879561e05492804242d7698e2db917
-
SHA1
1c7984620a6ed8700ad7628f03369312e0562ff5
-
SHA256
742db9471549b91bca93f28cb8b9ba804a4fa03346223b57384b62b9a386b124
-
SHA512
1a10f190996cf68764cbb2afe7630a522eb497d0c45289cbde789cd349a3ddde83856e8e81e732cbb82dc45e3e8c5e91554b0377f9fd6475dcc7d559da24ab08
-
SSDEEP
12288:BtfOZ1Zyqwlet9qeBKLALDxpS7GGzhbXYeM09aP2S8D6GRHtIw9duqxedwGHGc6:TWZVLqeB6ALDxzGBCmWGRHlruqxedic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ZiraatEkstre_202308.exe
Files
-
ZiraatEkstre_202308.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ