63805f5990d34a7f2aa4ef63c0bc21541773c6925a0927a92e78fc6c91c852c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63805f5990d34a7f2aa4ef63c0bc21541773c6925a0927a92e78fc6c91c852c9
Size

589KB
MD5

13deedc7bb3b1ffaf075439dbb119aaf
SHA1

5cfffce3b7cc44ca14d627ebbc1897a4befd3b29
SHA256

63805f5990d34a7f2aa4ef63c0bc21541773c6925a0927a92e78fc6c91c852c9
SHA512

76bf0b967d4c6800819fa5b23c0bb33fcd555a4158fb6a3991896044d773c8fae165bd52a456296c19aab2f1776f0fba2d05802c37af6d2aa71f3d817087b11e
SSDEEP

12288:jdsouQAwrj12Ot0QHq4gmWc3xGPUTn4OhNF2TPzux+4eX7:jGQh8a0D4gmWmxZTnFNF5x+4O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Halkbank_Ekstre_20191102_073809_405251-PDF.exe

Files

63805f5990d34a7f2aa4ef63c0bc21541773c6925a0927a92e78fc6c91c852c9
.zip
Halkbank_Ekstre_20191102_073809_405251-PDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ