09102023_2047_09102023_Ziraat Bankasi Swift Mesaji[.]r12 | Triage

Sharing

General

Target

09102023_2047_09102023_Ziraat Bankasi Swift Mesaji.r12
Size

560KB
MD5

fb2f8ac1e6dc79f29302bcf7a987174c
SHA1

6c350dcc5fd9960965ae4be1abdd7005167a5052
SHA256

a055190b3be5f7049e5a3ead7e1537e81f6a4754673e13d7fac0d6afa6d25f9c
SHA512

aa02425829fde516f76ff4b1ae527b8dd2d54648b2ce6b23ffbfe3285572a9c293697844ff1ef8a714196ebb299a8ac1a37a6aaeca1ebd93a4034f9fadfe73a5
SSDEEP

12288:x0+QN6jTBhYtNWuHZ7NHNiw7TteA/5i5NGOz:xTdNhYtN55ptUaOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ziraat Bankasi Swift Mesaji.exe

Files

09102023_2047_09102023_Ziraat Bankasi Swift Mesaji.r12
.rar

Password: infected
Ziraat Bankasi Swift Mesaji.exe
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ