Static task
static1
Behavioral task
behavioral1
Sample
PAYMENT SWIFT COPY.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
PAYMENT SWIFT COPY.exe
Resource
win10v2004-20220812-en
General
-
Target
PAYMENT SWIFT COPY.exe
-
Size
839KB
-
MD5
7dca2cb85baacc7967ba4c1dac2c11b2
-
SHA1
96bf887fa31b3911c1883cd92e7bbea9be7d8c29
-
SHA256
255087d6b205898f5ce5946eb24ac65a25dac12800d37958f2a4970788afe791
-
SHA512
4bf3d82dc2f5d0d09b68cd66e445e3e5683285fbd07ce6c460a560a0e9551592a9d7b7a3eb976d797e9d894f408d1599833493506666e2c62afaa82c28363366
-
SSDEEP
12288:kxNduADqjJ5nI8YbmRkiOeySPqwE5hgWO9s+RMSre:owjrI+Ry6fkqHp
Malware Config
Signatures
Files
-
PAYMENT SWIFT COPY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ