Static task
static1
Behavioral task
behavioral1
Sample
Hesaphareketi-01.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Hesaphareketi-01.exe
Resource
win10v2004-20240419-en
General
-
Target
03052024_1526_03052024_Hesaphareketi-01.tar
-
Size
705KB
-
MD5
049e74bc789c2c5e914480359660b543
-
SHA1
d46c4db861c520968a83a31b6e643adbab3ec7ef
-
SHA256
5aa35c82888f55435832a34297d69a8baafef31cba2d7f8a253a921e427dc9ef
-
SHA512
f4583b1f82fcf507bde66d46f14767e807bfee3cdaac23e8659203525a7f9f145406fb430d860cc8760cc8d36d3fd62cf4f0a59da660da4b7b35b08de3849b0e
-
SSDEEP
12288:K+N1mflQ2RQu0A+jlsu9eYgBD9A2LsU/oOkmNPKatSrLsJc1mZORGYWoUws9tyO0:f6f62RQtCu9eBDKU/oOhNSxn3m1Vo9sY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Hesaphareketi-01.exe
Files
-
03052024_1526_03052024_Hesaphareketi-01.tar.tar
Password: infected
-
Hesaphareketi-01.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ