BqGH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
08092024_0601_05092024_Halkbank_Ekstre_20222501_ 073653_270424.JPG.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08092024_0601_05092024_Halkbank_Ekstre_20222501_ 073653_270424.JPG.exe
Resource
win10v2004-20240802-en
General
-
Target
08092024_0601_05092024_Halkbank_Ekstre_20222501_ 073653_270424.JPG.pif
-
Size
627KB
-
MD5
618dab9ba55692e86e4557d561417628
-
SHA1
08ba7ba92df636e936a0f138bc735dfc56ba4722
-
SHA256
43a1e3cca46c0876a7082c04aa7b0b0174aff22a9387301229eacbb120334fcf
-
SHA512
1e91ebe54fd7809a47a438453be506c47f681bb174c1eb8ad0c3aac611c1788d716ffbcab8ace9bb56d6215a5edf3544a80740f9fc1d20fe5f617cae3ace6ada
-
SSDEEP
12288:FH21UoIG5MPU8swE31D2shk8giOInK12jpXB1juSGf4HrS4CG7qFHEDg:4Uoby8P38shk8PFpXBY14HGZG78Sg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08092024_0601_05092024_Halkbank_Ekstre_20222501_ 073653_270424.JPG.pif
Files
-
08092024_0601_05092024_Halkbank_Ekstre_20222501_ 073653_270424.JPG.pif.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 617KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ