Static task
static1
Behavioral task
behavioral1
Sample
BANK SWIFT.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BANK SWIFT.exe
Resource
win10v2004-20220812-en
General
-
Target
BANK SWIFT.zip
-
Size
492KB
-
MD5
d672bfded92111552a1ef71be579e031
-
SHA1
66aee86b73ed421de558b1dbd0965a12454cbe6c
-
SHA256
3876487e7ad0e5ae310934cf647376953c5f54e31b92335bf5723f7167722a52
-
SHA512
8be997f352ac41217f4a315a195116712f17c32c77690903bc0b6257a2bafb099afed448167587583c3250d48da5546fe305268c849e921a0cf0769ab6813468
-
SSDEEP
6144:1q4aecD2qHuBH1V9BS4h3xUfq6hQTjxJSoAVDuGaQnfX90damSJ2ijnGF97Z8quw:1q4a/C1jBS45xW8ANnf12NFf8p/lTFw
Malware Config
Signatures
Files
-
BANK SWIFT.zip.zip
-
BANK SWIFT.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 677KB - Virtual size: 676KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ