Static task
static1
Behavioral task
behavioral1
Sample
Mensaje SwiftBo 20.897.64.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
Mensaje SwiftBo 20.897.64.exe
Resource
win10v2004-20230703-en
General
-
Target
Mensaje SwiftBo 20.897.64.exe
-
Size
882KB
-
MD5
356920606036ef8a954bbb852a50de00
-
SHA1
510cfc61892dc01f793f152cfef4e81faf687143
-
SHA256
50cad31fae9c45dcdd778695df5c75eed96bec0262755cb259ef1970366777c3
-
SHA512
aad2057720c6cf8f37caf6ee1c3bfa3f3452ddf1b12d2fc6d5ce4162a183aa9a4a6b9b062806a0fe5211cff451a21cb9123ecbc0cf0a552ce60ade24ad0c4b9f
-
SSDEEP
12288:4ikVfqwi/iWsjdz9NrnrLJ6Y+I1OIQgzz6x6r7hx9aU+FYeAI4nqItyTKiB7:9qqwiiWenrEG5QwzGCf9+x4/tyt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Mensaje SwiftBo 20.897.64.exe
Files
-
Mensaje SwiftBo 20.897.64.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 871KB - Virtual size: 871KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ