Static task
static1
Behavioral task
behavioral1
Sample
Hesaphareketi-01.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Hesaphareketi-01.exe
Resource
win10v2004-20231215-en
General
-
Target
635fe4e16761539dd856759e76b17920.bin
-
Size
623KB
-
MD5
c1946467578d960d88da8240f3b8fb90
-
SHA1
585294b00e00b9ac92a15794b86b7f1ba9c10aad
-
SHA256
c47b72ee4c145d757970da92a34d6572b9ca3c8d326d766394f83a59f9de3de4
-
SHA512
1d9ad6f5d113cafc3da4e17abcb4628d56fb44bfbe7691bb98867df142dad35b6b54c82628c52f7d3ee8ecca53dcf0f2a44788a401e24c097856d03c3c8e5cee
-
SSDEEP
12288:NTv8e1GPy0qUtPT8PRocB26q6/WLnYEVLZ42srVYvBhNEvJ63aAew7:Nb8euy0NPTKlq5jVL5s5FBRAx7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Hesaphareketi-01.exe
Files
-
635fe4e16761539dd856759e76b17920.bin.zip
Password: infected
-
76e1de4a23ef2552ede9d3d7cc0f815d4a0e8c8112d8d5ffc83815a0b0ff6503.tar.tar
Password: infected
-
Hesaphareketi-01.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 631KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ