Ziraat Bankasi Swift Mesaji,PDF[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ziraat Bankasi Swift Mesaji,PDF.exe
Size

856KB
MD5

52df53e5c6c753ace9c8bfa3568facff
SHA1

85fffebcfc97980e035ddc2a61e582b50bf259a9
SHA256

ad75b282d723aca18196bbafaf8cce4901aa56b696967fd652fc163e1c0fc9ee
SHA512

47980e10ece79b93ebac08447a6a2336a5431754234bda6c34f9b865cec789214f2a4f360b4779faed92815a7dcf3d0c2d331f47c3ea22ca7ebde29e0805afcf
SSDEEP

12288:xzZZL90nrDphX3ZPjLRzn02ChMVw0Vl8Ux7cRtQ2EVEyAsMKz:x7mbZPnR702/a6F72rETMKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ziraat Bankasi Swift Mesaji,PDF.exe

Files

Ziraat Bankasi Swift Mesaji,PDF.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 853KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ