Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20230914_073809_405251-PDF.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20230914_073809_405251-PDF.exe
Resource
win10v2004-20230915-en
General
-
Target
Halkbank_Ekstre_20230914_073809_405251-PDF.exe
-
Size
945KB
-
MD5
645d673a63f86e7be291ab3d81bed4e6
-
SHA1
a710ee017588c457216b8b40efd68e87a5c8eb40
-
SHA256
411fc006ebe1724a6bab93d977e183ad283f648960c7dacb3eccfccf689967dc
-
SHA512
88639598dc9e8e610c5c0d8c41685e4fab2b84556c4c5cbde345f8605509e1321dfb1a26e9e345ca02b486629915e2ad675a14c9cdfe996ec16ba471dc38c7c1
-
SSDEEP
12288:EdrUl2iNt1NVXjl9TYQgSHA1nM5tw6pSe6G4+py6U19G/s+lP7r9r/+ppppppppV:MUl1rVMp1I5R4Xz+l1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank_Ekstre_20230914_073809_405251-PDF.exe
Files
-
Halkbank_Ekstre_20230914_073809_405251-PDF.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 732KB - Virtual size: 731KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ