Static task
static1
Behavioral task
behavioral1
Sample
SWIFT BANK COPY.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SWIFT BANK COPY.exe
Resource
win10v2004-20230703-en
General
-
Target
SWIFT BANK COPY.exe
-
Size
37KB
-
MD5
8e1367adca7113803afe06e6543694cd
-
SHA1
7171f5ab8cf0c2f60001029b63d06fbc2af40583
-
SHA256
3c1294b9a29a8aa83661ea11324a56c101a318bed5b49f6e47ec24c535330bfb
-
SHA512
e5f98a6da0239e9d6df1fd310677d9ed064d0468b60b4e75f38de1aa3fc9d7cfc5324aede497c5d1e6555241da602e1df1079d1ebedd383460b0f7c5b2233263
-
SSDEEP
768:olnPlW8e4j+E3M2F7Tllmu24Ra2DovIieNhIPVQPavQ5:+AY+Z2JTll92m7ov0oWMQ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SWIFT BANK COPY.exe
Files
-
SWIFT BANK COPY.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ