C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\may\31\NAM\obj\Debug\NAM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
YapiKrediInternetBankaciligi_Dekont_20240531_266_40240020.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
YapiKrediInternetBankaciligi_Dekont_20240531_266_40240020.exe
Resource
win10v2004-20240508-en
General
-
Target
YapiKrediInternetBankaciligi_Dekont_20240531_266_40240020.exe
-
Size
595KB
-
MD5
ee4bf41b907bc392d81019a6a94949bf
-
SHA1
0b938cc890947766c5133f46225acee30bf08bc4
-
SHA256
15c04e22491f8e845da0adff79abd677fc12388ccea0f7c031c679ef175e3228
-
SHA512
e3e66239827ee024217e04863f62bd6aad302f1049b4c337ba9bd14d790ec01c4c2e85c7c7a28f929f1bdde797967f6ca2f08bd32770bb319cfb378bd23e5184
-
SSDEEP
12288:vaw2pkEVVr3/sqHj4QOnubaa4PICGZiFIYKP/7IBy:vOLTP/D4im7PICGgyVPsBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource YapiKrediInternetBankaciligi_Dekont_20240531_266_40240020.exe
Files
-
YapiKrediInternetBankaciligi_Dekont_20240531_266_40240020.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ