Static task
static1
Behavioral task
behavioral1
Sample
03.10.2023_135836_İş_Bankası_Döviz_Transferi_(148038560)_PDF.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
03.10.2023_135836_İş_Bankası_Döviz_Transferi_(148038560)_PDF.exe
Resource
win10v2004-20230915-en
General
-
Target
b4c4861a88bd71defdfc7d2b254b8a5b33c62147287db837be75f6606e1c184cz_JC.rar
-
Size
503KB
-
MD5
a508c96472c267b86e5d733c88e21377
-
SHA1
f58b56bbd3a68e9511d1efec2faa5dd4f65f2f05
-
SHA256
b4c4861a88bd71defdfc7d2b254b8a5b33c62147287db837be75f6606e1c184c
-
SHA512
57ada6cdf25e0cbf51ee0ca1106ca8c47573c4e141b17d2a040480958b77995d6344b61e3d0d2e30935e833874dfa5a127f94c362e100468886c8e8f0c666aa4
-
SSDEEP
12288:TtHnWJt+6Qmbv/76hIK76XRdCFQxdUfEvgbswiwLyc:TtuE6Q+1RoFQxdUfEvgbswiwmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/03.10.2023_135836_İş_Bankası_Döviz_Transferi_(148038560)_PDF.exe
Files
-
b4c4861a88bd71defdfc7d2b254b8a5b33c62147287db837be75f6606e1c184cz_JC.rar.rar
-
03.10.2023_135836_İş_Bankası_Döviz_Transferi_(148038560)_PDF.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 527KB - Virtual size: 527KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ