Order No 131223AT ZIRAAT BANKASI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Order No 131223AT ZIRAAT BANKASI.exe
Size

758KB
MD5

d0c8fdf483586871106293e5ff6cceae
SHA1

22441e2555fb7259dac3593536c52483cab45f87
SHA256

72a051505abb9381f7e7b9256a38007e6b2f73915fd0b6d1891bae17063e8259
SHA512

ce7e71a2080e221aebbc87ae828dc70949b3b9e3a4a83dbbc5f0ed9ac649323fb2813d54ef46b929ff3acf3089945d64d1e77fcccd0341e6813feef593404c8d
SSDEEP

12288:N4MlksJE2lQtlRYdyrID4D9RAVRy+2esAjT8sRNGA:N4SdJxQbOHUhRAPWesY8sRgA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Order No 131223AT ZIRAAT BANKASI.exe

Files

Order No 131223AT ZIRAAT BANKASI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 740KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ