Static task
static1
Behavioral task
behavioral1
Sample
SWIFT BANK COPY.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SWIFT BANK COPY.exe
Resource
win10v2004-20230703-en
General
-
Target
SWIFT BANK COPY.rar
-
Size
30KB
-
MD5
bb288e015fa6393d15500464c0f11b71
-
SHA1
29e1450afd3151667a29fb030370d72378662900
-
SHA256
dd8a3c0c94bb684dacc9f794f75670f0fb0a969f9abcda7b0996cdfcb69f1b32
-
SHA512
a89cc37675d611973f9a478eaa423cb37e1df05cb7f1fe2299101b1cdc802f74b01fdc11b7f210587d171cdefebf11d26b1089a18c17cd51ce3c6596b1e09ff1
-
SSDEEP
768:+1w1kzYW6OrYhFtijja3c3patcB1hPGUoqJ:7lWfroOqk881hPGLK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SWIFT BANK COPY.exe
Files
-
SWIFT BANK COPY.rar.rar
-
SWIFT BANK COPY.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ