Halkbank_Ekstre_22…93[.]25[.]09[.]24[.]pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Halkbank_Ekstre_22…93.25.09.24.pdf.exe
Size

692KB
MD5

296906c78a80a404a4e9527526cc28d0
SHA1

e3ebbf6bd31f804f58fda8a2ac9a4286c2634b20
SHA256

ec2b34886ee774ca2d99766e4fbb5cd8447a920ef760898a7c648d84518b744f
SHA512

3e5ff75a98af4feac7f73f2edb4f1896b3afac6a7992496483b29f1eabcd212303a799378d2a47b6c2d7d37c2c3b36b2e7b016aa922b9c96279cd61358404d89
SSDEEP

12288:F1eiz6+VtgURRP+BDJ0nvPXEdwKRn/RsqanAeor06Gsy7psz4ugn48bQb:5VtpUBt0vPUlZsDnA5resOpMGI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Halkbank_Ekstre_22…93.25.09.24.pdf.exe

Files

Halkbank_Ekstre_22…93.25.09.24.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JBxp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ