PAYMENT MT103 SWIFT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PAYMENT MT103 SWIFT.exe
Size

543KB
MD5

a5e50b631d51eb947f5c8a2892580837
SHA1

e79a0fca7bdb37f3d08195d81822e9a8ed0a6ae8
SHA256

dbb5146949de39de5d38abc86ab34503a6f0ca45862cf3056a0ba4391bb59529
SHA512

e3ef2ab5b8b1db829b4fd709753d70b205b040778a9a3c752160ab94c485e3aba6295dfc8471af882a38ef3cad75b5f3b47dd1e2d5fd22b1af3792124e611c21
SSDEEP

12288:lu06D2W2ICzjuSKAnAeIp7f7xMZ0pWzK62dNY:DQvkj9KAA9FMNzK6K

Score

1^/10

Malware Config

Signatures

Files

PAYMENT MT103 SWIFT.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ