ZiraatBankasiSwiftMesaji[.]exe | Triage

Sharing

General

Target

ZiraatBankasiSwiftMesaji.exe
Size

540KB
MD5

6df843ac8534d23d66a8941d24f188ad
SHA1

aebe1003ed387c4a0956f52dbcb47c92883e8d00
SHA256

908c835e6bb83a698ee20b6e10879c4ee7f3a625f5893c2111b5e1c992c56dbf
SHA512

e1358bc430af324aad944d60a54460c86103052c314e63e6ce57072d344f8876c74a3e63f17bb2efd0c3162dc39237d2cb99796785a43c53dcf825f86aa54467
SSDEEP

6144:56ejPRiXy4/0Fsker0NeTAtFUWN9lsm7Qem7rz+iovKQAfxciE5+t5T27VEMILgx:56wRiC8TOtFUWNU+SsvKQmxLZtP3eZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZiraatBankasiSwiftMesaji.exe

Files

ZiraatBankasiSwiftMesaji.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ