Static task
static1
Behavioral task
behavioral1
Sample
hesaphareketi-01.exe
Resource
win7-20231215-en
General
-
Target
08018c4ffcb5b25d3bedc1fddadf713e.bin
-
Size
682KB
-
MD5
5b63687c80fb7ab467a808937e0c3bac
-
SHA1
08545d7f26e7d6a0fafd442362802beefea4dac1
-
SHA256
00dca5c846aac5002f6f6936499acea6c1b1a6f559385c1b4baf65d8119d29ba
-
SHA512
cd260cdffeadc60a6679a290ea18ff401e3b92a9a2828990348fa4d3a8a52da96144c922387f01a418c0842392b2a322a288960cde4b38e809f9bcb30aedd974
-
SSDEEP
12288:RyYl8D8jJzcWX7en0Ya0fkrXKt/J0oaPVoao9aN7oi6DZarFvstv/I5P3me4+2E6:RyYl8I9zvXKn0pykLKAhPnoc6i6NapvQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/hesaphareketi-01.exe
Files
-
08018c4ffcb5b25d3bedc1fddadf713e.bin.zip
Password: infected
-
cdcfe38373b86398c5a645cce534150fb943e9a277d15895ecf99d7174419335.img.iso
Password: infected
-
hesaphareketi-01.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 849KB - Virtual size: 848KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ