payment swift[.]r15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payment swift.r15
Size

687KB
MD5

e2d5a96a39d87fad3ab3e74aa0f88146
SHA1

0f80bbb26cc6887d8a07d69aa279c5ec8ea08bfa
SHA256

8da46692ef69dbbc7eda6233e9f5e761112029454ad3158eca670800d3a69988
SHA512

b6fda9f04634aa1bdc9e6cffbc8c3d44c43bd1374268167321b3e931ea51cba9f0d6955b19ba9ce6cae74cf1a69d92f7bcbec869ae7c4708085afce1d71893ae
SSDEEP

12288:oyBTLwymsoC98SFgdCl3qSKDsMNhGMXhJvXrtriD/l6hjVSNQmo8w9s:bGsjJqhDhXv7liDdqjhmtw9s

Score

1^/10

Malware Config

Signatures

Files

payment swift.r15
.rar
payment swift.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 873KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ