Static task
static1
Behavioral task
behavioral1
Sample
Halkbank_Ekstre_20191102_073809_405251-PDF.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Halkbank_Ekstre_20191102_073809_405251-PDF.exe
Resource
win10v2004-20230915-en
General
-
Target
78bf8d26925889d117a9316dc419d97e2f7702a34abe57d254d65968a395b35b
-
Size
614KB
-
MD5
ea7e8fee2fccc3a48bd4114196241700
-
SHA1
0a5777662dced3f1a6e78d78017a469863459adc
-
SHA256
78bf8d26925889d117a9316dc419d97e2f7702a34abe57d254d65968a395b35b
-
SHA512
9e36b695bc11b63f6c8e3aed18f57d043ba846e8e40ce4c5e7712bbaa138da09f78c41476c0a5f405904f60bcb161e472a84a169aed0506fb888a53e4c648115
-
SSDEEP
12288:fMYoOvJK6X/5Luz7F0/Uh/XVrFnMIoY1RM8LRbGOh7UtBeRqV7NHOhOHKOf:0YHJK6cHK/UNXVpoY1RM8pGGIBv2GX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Halkbank_Ekstre_20191102_073809_405251-PDF.exe
Files
-
78bf8d26925889d117a9316dc419d97e2f7702a34abe57d254d65968a395b35b.zip
-
Halkbank_Ekstre_20191102_073809_405251-PDF.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 669KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ