Static task
static1
Behavioral task
behavioral1
Sample
Hesaphareketi-0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Hesaphareketi-0.exe
Resource
win10v2004-20231127-en
General
-
Target
Hesaphareketi-0.exe
-
Size
792KB
-
MD5
5cd7722aadafdc8813169f79fe26cd15
-
SHA1
a6eb9a2e6333bbcfce98d68764467e1c82b1d093
-
SHA256
725c43344564a051e58bc34bc3d2d54df05a2eb8edf522be7f0eba70087d3094
-
SHA512
98bd21cc932dc37f1fc71c8155c19c9c06eaf19cde32a8b0d9855249791bf2493aec95f5925f3c6b402f30e707689cb8e5bfa6540601c5072cf1583b808e985e
-
SSDEEP
12288:dhm1E6jD/paxJVZJToapvT/8uJ+nW9Kja0JTDYEy7P3ATsNcrZXY+opoxx:3m1tD/paxJNfvTUK+nagbmyZ/e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Hesaphareketi-0.exe
Files
-
Hesaphareketi-0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 691KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ