Static task
static1
Behavioral task
behavioral1
Sample
payment swift.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
payment swift.exe
Resource
win10v2004-20230220-en
General
-
Target
payment swift.exe
-
Size
512KB
-
MD5
f06d1b6a3cc9fd48a18a3ee609ee11be
-
SHA1
3881a0832b4b5a43e2e7e39fde34fd1ac31eff5a
-
SHA256
efec6e96c47493b4436248b82b23ea50f0945b43b899b2589374b0c89df88212
-
SHA512
a00fa38dc435ed34456ec0981672e543b70d8f9a43f0cdc643378ccf20664131b98853a34e2b4c8754d193f89f452435576704b08a1c18e9928c9d532ae922be
-
SSDEEP
6144:+gzRAoT2GhN2I83miC5Udl7V7OVmzqWVfCII83miCV1oEL2yZV98DnqLDvSxKGKM:9L2iNo3XdJVZz5dB3MAfnqnvKD3
Malware Config
Signatures
Files
-
payment swift.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 999KB - Virtual size: 999KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ