Static task
static1
Behavioral task
behavioral1
Sample
Halkbank,doc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Halkbank,doc.exe
Resource
win10v2004-20230915-en
General
-
Target
Halkbank,doc.exe
-
Size
392KB
-
MD5
04ce3268080cb301ad8202217685ca59
-
SHA1
b5466d71f17fb9f454cee13a83faf7c1e2d0022d
-
SHA256
4f619c7b4f54dd6ed7833880c8600334c42084a20c73d9b76973d45202a734c7
-
SHA512
3feecf60ae8f5aa9dbba576cf61b9db8f7359ce6056ecd8c463898f4cb301242280101c5f56143b79ae07c043270612299f43246d144700d0aba0fa2970bf715
-
SSDEEP
12288:+/nedKoh5Y6yMYmWjBJlpeSzoD7O1CR3m:2gdh5NKtJD8PrR3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Halkbank,doc.exe
Files
-
Halkbank,doc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ