Static task
static1
Behavioral task
behavioral1
Sample
hesaphareketi-01.pdf.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
hesaphareketi-01.pdf.exe
Resource
win10v2004-20241007-en
General
-
Target
ac3710ec74a9f12adeb7d84ea6a6ea512c6197d765b2aef9e87a25cbf8d6d9ab
-
Size
497KB
-
MD5
45f938ced699b68615db63a27bc24ae8
-
SHA1
408156ef59bc3dc9416deec19d265f8baa232339
-
SHA256
ac3710ec74a9f12adeb7d84ea6a6ea512c6197d765b2aef9e87a25cbf8d6d9ab
-
SHA512
c104f08f6695a7cf65e7c7b9d72e5971d484a85ee62b66a9c2aa579cc3d7ae4e23b672335074362f2b5f81e08ec6bd6978f147d64e33549e80c51cc5333c65b3
-
SSDEEP
12288:1C5gM8dYDtR/5rPBPXuheI43w3uXumV1S:mh8diPBPZuheI4g3aum+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hesaphareketi-01.pdf.exe
Files
-
ac3710ec74a9f12adeb7d84ea6a6ea512c6197d765b2aef9e87a25cbf8d6d9ab.zip
-
hesaphareketi-01.pdf.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 471KB - Virtual size: 470KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ