Static task
static1
Behavioral task
behavioral1
Sample
INVOICE SWIFT COPY.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
INVOICE SWIFT COPY.exe
Resource
win10v2004-20230220-en
General
-
Target
INVOICE SWIFT COPY.zip
-
Size
513KB
-
MD5
f3b034889c7524d6f5636549af97962a
-
SHA1
e3fe4c339869bdb0e86b666b94e1dc6d625a656e
-
SHA256
97e8f682e55292ced96ad0b8ac320581950d2648e57d2b463470754fa0b98f73
-
SHA512
963987da4cd0e6a76f10e18a6564537d133506709e583b4ab15d95a45bae7acba4f83a9e2c9f178f3022cd118ee9a59dac69133440e83529d3b1006d4827a03f
-
SSDEEP
12288:wSWskmzu0+6Kd1cML4T1LtDwuFsLyFd0E4kSJZGwrZK654s98P6nVqWh3i1jW0+:dWsX+vdNL2xwuWLysEpCGwt54sK8qc3T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INVOICE SWIFT COPY.exe
Files
-
INVOICE SWIFT COPY.zip.zip
-
INVOICE SWIFT COPY.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 685KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ