Static task
static1
Behavioral task
behavioral1
Sample
hesaphareketi-.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
hesaphareketi-.exe
Resource
win10v2004-20240910-en
General
-
Target
19092024_0109_17092024_hesaphareketi-.7z
-
Size
581KB
-
MD5
00fc1891736e9519658a9a5c6157be49
-
SHA1
7d9d52d6c43125ad121ebd018094730fc976372c
-
SHA256
f02c1480ea91f001a150cf0ee8de91b5d017013f298a2b85656d11fcd2b30751
-
SHA512
1af9c58a397fb4636ad35f60a032a0d877b3dfe094a4914a59aa2139b264b71ee94e3154f03311db00b08cd56684372919237d943f2c31524073093e664a23bc
-
SSDEEP
12288:vO4rvVEgMq8qBh7k3eDSRGUO8bUTK7DjzuBLDmg1Gxv1EZ+QE:5rvxx8qPH8AWf4sv1+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hesaphareketi-.exe
Files
-
19092024_0109_17092024_hesaphareketi-.7z.7z
Password: infected
-
hesaphareketi-.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ