Static task
static1
Behavioral task
behavioral1
Sample
SWIFTmesaji7582353645856740000.pdf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SWIFTmesaji7582353645856740000.pdf.exe
Resource
win10v2004-20230220-en
General
-
Target
SWIFTmesaji7582353645856740000.pdf.exe
-
Size
543KB
-
MD5
afe8b3a4bd40202208456b26df8b72e8
-
SHA1
d9f634442a476491dd11de815561275dc20a9951
-
SHA256
2ca8429adde8868be7eefa5bd9787849700fc642210fe87ee3c72d6ee50c324d
-
SHA512
29b10e3a7b1ba561e76c466e396c047e1c8b98c0c77bd973ebd1123d0f4e4f705a4cc3f4bab377ca97f48b182bc2abec04fe21d6197172547e872be84c37a57d
-
SSDEEP
6144:O445np6BOBU2+tA9eWkOU5my2xuxBf49LcfRv1TJjMvJhX55iJaOdrsatkI5PwAU:sMHqoWRamy2xUBfEcJvDoeJh1skaUDi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SWIFTmesaji7582353645856740000.pdf.exe
Files
-
SWIFTmesaji7582353645856740000.pdf.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ