Ziraat Bankasi Swift Mesaji[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ziraat Bankasi Swift Mesaji.exe
Size

619KB
MD5

90fff2b5b90eaeaa6aa17b1c53e4035f
SHA1

749bcad6f411575479d59bbeab7e006fbb383698
SHA256

ad88ebe85ec15202272324207b4d11133e9f52c076435ea45d181590bff8e179
SHA512

fe73d8cf0416d606d07a3d485bb7bdea1e6aa0c63ac0d8cbc1bbc5bda32ece9007b35bd8bce68eb8dd5154594eff0202f5acf1d07ae3e1c2b76795744cf18b24
SSDEEP

12288:gKax1vjJGGna1vjsOv2SA1OsG04lEij54aASZgm715OaIKMApeg1:Zax1LJ1na1vjrOSkG5T5dAyIKMApeg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ziraat Bankasi Swift Mesaji.exe

Files

Ziraat Bankasi Swift Mesaji.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ